Edit tour

Windows Analysis Report
http://kristalittle.com/

Overview

General Information

Sample URL:	http://kristalittle.com/
Analysis ID:	1540674
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4528 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kristalittle.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /eligible.json?account_token=NPS-8ea632bb&email=krista.little%40cbrealty.com&end_user_created_at=1699056000&end_user_last_seen=1729723852126&language%5Bcode%5D=&language%5Baudience_text%5D=&language%5Bproduct_name%5D=Moxi&sdk_version=wootric-js-sdk-1.12.7&properties%5Bproduct_name%5D=Moxi&properties%5Bsub_product_name%5D=Websites&properties%5Baccount_creation_date%5D=1699056000&properties%5Bbrand%5D=CB&properties%5Bcompany_ID%5D=null&properties%5Bcompany%5D=Arizona&properties%5Boffice_ID%5D=P00400000FDdqRN8Xm6C0DZnH2aw1OxSLA4dJKdr&properties%5Boffice_name%5D=Sedona&properties%5Bokta_ID%5D=P00100000GPDWjKgk7gfr2JRd2mpTpiEW8kLfiDu&properties%5Bagent_mdm_ID%5D=P00200000GPDX6jV32hKdipaCnxU1G380RyTb4uU&properties%5Bcountry%5D=US&properties%5Bsite_type%5D=Agent%20Website&properties%5Bsite_mode%5D=frontend HTTP/1.1Host: eligibility.wootric.comConnection: keep-aliveContent-Length: 66sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://kristalittle.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kristalittle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: http://dinbror.dk/blazy
Source: chromecache_238.6.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_238.6.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_290.6.dr, chromecache_268.6.dr, chromecache_284.6.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_185.6.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/GAM_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/GAM_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/GAM_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/KVB_Large_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/KVB_Medium_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/KVB_Small_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/MMM_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/MMM_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/MMM_Logo_Smal.png
Source: chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/MT-Reg.png
Source: chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/OKC_Logo_Large.png
Source: chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/OKC_Logo_Medium.png
Source: chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/OKC_Logo_Small.png
Source: chromecache_178.6.dr	String found in binary or memory: http://images-static.moxiworks.com/static/images/br/mls/TML_Logo.png
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://joe.sh
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://jscrollpane.kelvinluck.com/
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: chromecache_249.6.dr, chromecache_176.6.dr	String found in binary or memory: http://svc.moxiworks.com
Source: chromecache_184.6.dr, chromecache_286.6.dr, chromecache_164.6.dr, chromecache_251.6.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://vadikom.com
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://vadikom.com;
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: http://wordpress.org/
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: http://www.google.com/
Source: chromecache_249.6.dr, chromecache_176.6.dr	String found in binary or memory: http://www.jacklmoore.com/colorbox
Source: chromecache_249.6.dr, chromecache_176.6.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_164.6.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_199.6.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_185.6.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_185.6.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_205.6.dr, chromecache_275.6.dr, chromecache_215.6.dr, chromecache_199.6.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_224.6.dr, chromecache_283.6.dr	String found in binary or memory: https://cdn.brytecore.com/brytescore.js/brytescore.min.js
Source: chromecache_224.6.dr, chromecache_283.6.dr	String found in binary or memory: https://cdn.brytecore.com/packages/realestate/package.json
Source: chromecache_220.6.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.4/blank.gif
Source: chromecache_220.6.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.4/fancybox_loading.gif
Source: chromecache_220.6.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.4/fancybox_overlay.png
Source: chromecache_220.6.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.4/fancybox_sprite.png
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_185.6.dr	String found in binary or memory: https://coldwellbankerhomes.com
Source: chromecache_292.6.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_248.6.dr, chromecache_202.6.dr, chromecache_169.6.dr, chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_247.6.dr, chromecache_273.6.dr, chromecache_190.6.dr, chromecache_192.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=places_js&utm_
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_292.6.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_261.6.dr, chromecache_188.6.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_185.6.dr	String found in binary or memory: https://engage.cbmoxi.com
Source: chromecache_185.6.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_280.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlowsemicondensed/v15/wlpigxjLBV1hqnzfr-F8sEYMB0Yybp0mudRfp66_B2sl.wof
Source: chromecache_280.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlowsemicondensed/v15/wlpigxjLBV1hqnzfr-F8sEYMB0Yybp0mudRfp66_CGslu50.
Source: chromecache_280.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlowsemicondensed/v15/wlpigxjLBV1hqnzfr-F8sEYMB0Yybp0mudRfp66_CWslu50.
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_217.6.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: https://github.com/dinbror/blazy)
Source: chromecache_184.6.dr, chromecache_286.6.dr, chromecache_164.6.dr, chromecache_251.6.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_290.6.dr, chromecache_268.6.dr, chromecache_284.6.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_169.6.dr, chromecache_292.6.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_169.6.dr	String found in binary or memory: https://goo.gle/places-permanently-closed
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_185.6.dr	String found in binary or memory: https://i1.moxi.onl/img-pr-001949/svv/1203ac4639d2463a32b2532aeb5d77fe029a557d/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i1.moxi.onl/img-pr-001950/svv/ec124a08cc92621460dfa614379f2a6595b06739/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i1.moxi.onl/img-pr-001998/arz/a2620143db097a697487248c681a8d93b2d081dc/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i10.moxi.onl/img-pr-001977/svv/b7f463b5f442f1fe5da1cdeea60a317f9d64ae1c/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i11.moxi.onl/img-pr-001952/svv/d809a2c534974dadd450931df840381804a8d8f5/1_4_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i12.moxi.onl/img-pr-001882/svv/a9c30cebff5c73cf1a078ebd4c314c571b75b629/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i12.moxi.onl/img-pr-001999/arz/51ba2b3950684c63f971b86079a74ccb1b78a98d/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i12.moxi.onl/img-pr/a/b5555792-2a81-434a-ba98-10845eabb0dc/0_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i13.moxi.onl/img-pr-001933/svv/b0714f891466a5527c57de0d02bf133bf39b9cbc/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i13.moxi.onl/img-pr-001950/svv/5a45a203c6c422efc56494410464888d31fac08f/1_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i14.moxi.onl/img-pr-001887/svv/4012a93239ad985777eb373d8a27a7196694b0ea/1_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i14.moxi.onl/img-pr-001890/svv/2cdebff719bc67e57ef2768bf575019dda1a4f0e/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i15.moxi.onl/img-pr-001887/svv/73602f7c4d22d1ff5e3a388ce71f05cab2d5d8fb/1_4_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i15.moxi.onl/img-pr-002005/svv/21a50f8f71f1b1fa70c1808f91b31d7862ffbf19/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i16.moxi.onl/img-pr-001892/svv/83ebcf803f2eade315d160d1427ea0de5561a2e6/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i16.moxi.onl/img-pr-001998/svv/519423805fc668d6141f6dc78c47a48479660d8f/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i16.moxi.onl/img-pr-001999/arz/96afaaa4dfcd766b845bcd068f0e319dfe7f8b9a/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i2.moxi.onl/img-pr-001878/svv/6b1508ab4d6c79592a7f5f2e6ad0533f1214739b/1_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i3.moxi.onl/img-pr-001855/svv/378400623497be7d943e49f62b4f6e7a919e0ba3/1_4_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i3.moxi.onl/img-pr-001898/svv/b54f41fe17b94555061507b7a37611ecdf257be7/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i4.moxi.onl/img-pr-001878/svv/59985d47aa045f8c75a2d05d022341c73c27b87d/1_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i4.moxi.onl/img-pr-001903/arz/0038c043219fbee97f1e33b9ba62fe2bda30cb88/1_15_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i5.moxi.onl/img-pr-001799/svv/2e8e2418ffdb7c66a699c07155c174d7f2f57b6a/1_4_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i5.moxi.onl/img-pr-001852/svv/fb8cf5717b12098f9f29f1b963a80c860822922e/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i5.moxi.onl/img-pr-001954/svv/ebd03055ea85433c696a1114cd973050b263bc97/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i6.moxi.onl/img-pr-001996/arz/f4cfe2c53249eada03f62983e63cb22182fb9855/1_4_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i8.moxi.onl/img-pr-001884/arz/33f9316e254b2eb334e69569fb2c3c5d741840fe/1_5_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i9.moxi.onl/img-pr-001878/svv/1f9c3e87afd106ebce5ff244103ec0dce0873d60/1_3_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i9.moxi.onl/img-pr-001971/svv/bc2f65ff2d22e073c91007904ac5ed7c70d979d8/1_2_full.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://i9.moxi.onl/img-pr-001999/svv/8634e82cc15472e695221e8d910dad2517e8bd63/1_3_full.jpg
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/CB_DEL
Source: chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/CB_Logo_RGB_Horizontal_Stacked_Realty2x.png
Source: chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/CB_Realty.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/Logo_Residential_usererage_HZ_STK_BLU_RGB_FR
Source: chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/cb_realty_lightBG-530x124.png
Source: chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cb/hammond_re_logo-300x168.png
Source: chromecache_255.6.dr, chromecache_185.6.dr, chromecache_204.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/cbwest/CB_Favicon_144x144.ico
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CCI_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CCI_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CCI_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CIN_Logo_Large.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CIN_Logo_Medium.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/CIN_Logo_Small.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/EBR_Logo_Large.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/EBR_Logo_Medium.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/EBR_Logo_Small.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/ERE_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/ERE_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/ERE_Logo_medium.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/FMLS_IDX-94x20.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/FairHousingLogo-24x24.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/GLV_Large_Logo_Cropped.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/GLV_Medium_logo_cropped.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/GLV_Small_Logo_Cropped.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/HGMLS-131x32.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/HGMLS-164x40.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/HGMLS-246x60.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/HHM_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/IMLS_large.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/IMLS_medium.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/IMLS_small.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LBA_Logo_Large.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LBA_Logo_Medium.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LBA_Logo_Small.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LIB_Large.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LIB_Medium.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LIB_Small.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LOW_Large.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LOW_Medium.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/LOW_Small.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MAR_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MAR_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MAR_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MFR_Large_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MFR_Medium_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MFR_Small_Logo.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MLSCO.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MLSGrid_Logo_Large.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MLSGrid_Logo_Medium.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MLSGrid_Logo_Small.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MTL-131X25.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MTL-164X32.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/MTL-246X47.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NAL_Large_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NAL_Medium_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NAL_Small_Logo.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NCR_Logo_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NCR_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NCR_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NJMLS_Logo.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NJMLS_Logo2021.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NJMLS_Small_Logo2021.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NRE_Logo_Medium.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NRE_Logo_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/NRE_Logo_large.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/PPMLS-logo-new-105x29.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/RAA_Logo_Large.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/RAA_Logo_Medium.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/RAA_Logo_Small.jpeg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/REColoradoEHO-69x60.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/REcolorado_IDX_Color-172x22.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/RMLSLogo-66x24.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/TII_Logo_Large.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/TII_Logo_Medium.jpg
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/TII_Logo_Small.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/TMI_Large.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/TMI_Small.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/idx_alaska-35x36.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/idx_alaska-98x100.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/mre_logo.jpg
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/powered_by_realtor_large.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/powered_by_realtor_medium.png
Source: chromecache_178.6.dr	String found in binary or memory: https://images-static.moxiworks.com/static/images/br/mls/powered_by_realtor_small.png
Source: chromecache_204.6.dr	String found in binary or memory: https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P0
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/#organization
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/#website
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/?s=
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/ab/3145525/about-coldwell-banker
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/ab/3145525/cbgl
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/blog/
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/buying-and-selling-tips
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/cb-estimate-seller-services
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/contact-me
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/feed
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/files/2024/06/Krista-Little-scaled.jpg
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/financial-calculators
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Cave-Creek/6045-E-Duane-Lane-85331/188467884
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Clarkdale/1081-Elm-St-86324/187851642
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Clarkdale/1500-Kerrie-Lee-Drive-86324/187851643
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Clarkdale/830-Eagle-Ridge-Rd-86324/187851640
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Cornville/1733-S-Sugarloaf-Rd-86325/199973155
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Cornville/1733-S-Sugarloaf-Road-86325/199677478
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Phoenix/18202-N-Cave-Creek-Road-17units-85032/199967512
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Phoenix/18202-N-Cave-Creek-Road-5-Units-85032/199968172
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Prescott/4722-S-Senator-Hwy-86303/194930570
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/00-Serenade-Court-123-86336/188270567
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/120-Skyline-Drive-86351/189230279
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/130-Starlite-Drive-86336/197756497
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/15-Cindy-Lane-86336/195070674
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/160-Crystal-Sky-Drive-86351/185228204
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/18-Disney-Lane-86336/189851571
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/20-Calle-Feliz-86336/188787232
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/205-Scenic-Drive-86336/185503522
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/213-El-Camino-Tesoros----86336/190373551
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/245-Ridge-Rock-Rd-86351/195461339
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/30-Quail-Circle-86351/195024739
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/32-Running-Springs-Drive-86351/197100346
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/460-Juniper-Drive-86336/188726281
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/49-Rim-Trail-Circle-86351/189070332
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/55-Rio-Verde-Circle-86351/193351038
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/57-E-Dove-Wing-Drive-86336/198413613
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/70-Ruby-Drive-86336/195291939
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/821-Brewer-Rd-86336/200502459
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/88-Chapel-Rd-86336/199882902
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/88-Chapel-Road-86336/199881196
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listing/AZ/Sedona/95-Las-Ramblas-86351/179941576
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listings/featured-properties
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listings/my-active-listings
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listings/my-office-s-listings
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/listings/my-sold-listings
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/move-meter-buyer-services
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/neighborhood-news
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/neighborhood-news/
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/profile/my-bio
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/search/#
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-flexslider-814ed83f9289c3e5ab8
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c9387
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-0703f4632eb5b4a19e7b0
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-c9f1ac4d10271921b65df
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-includes/css/dashicons.min.css?ver=782b628426a895c0dfd7727f0e7fb402
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/wp-json/
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/xmlrpc.php
Source: chromecache_185.6.dr	String found in binary or memory: https://kristalittle.com/xmlrpc.php?rsd
Source: chromecache_185.6.dr	String found in binary or memory: https://listings.moxiworks.com
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: https://maps.apple.com/
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: https://maps.google.com/
Source: chromecache_185.6.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3&client=gme-windermeresolutions&libraries=places&
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png);-webkit-background-size:34px
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons_hdpi.png)
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png);background-position:
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3_hdpi.png)
Source: chromecache_185.6.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css
Source: chromecache_185.6.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js?ver=782b628426a895c0dfd7727f0e7f
Source: chromecache_185.6.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Source: chromecache_178.6.dr	String found in binary or memory: https://moxi4.ssl.hwcdn.net/img-pr/i/04c367aea4b80852c3f02a8369aaee175cffa981/0_2_raw.jpg
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_199.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_205.6.dr, chromecache_275.6.dr, chromecache_215.6.dr, chromecache_199.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_202.6.dr, chromecache_169.6.dr	String found in binary or memory: https://places.googleapis.com/
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_229.6.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_229.6.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_164.6.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_185.6.dr	String found in binary or memory: https://schema.org
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://ssoportallax.rapmls.com/SSOLogon.aspx?ApplicationID=FRES
Source: chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_221.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_229.6.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_164.6.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_185.6.dr	String found in binary or memory: https://svc.moxiworks.com
Source: chromecache_185.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/auth/javascripts/iframelogin/jquery.iframelogin.min.js?ver=A.3.
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_blue-110x110.png
Source: chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_blue-116x38.png
Source: chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_blue-156x50.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_white-110x110.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_white-156x50.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house_highlight.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house_open.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house_open_highlight.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house_sold.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house_sold_highlight.png
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/favicon.ico
Source: chromecache_255.6.dr, chromecache_204.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/branding/images/tcma/touchCMA_notext-422x422.png
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://svc.moxiworks.com/service/v1/profile/mls?callback=jQuery3710923492156920481_1729723842516
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_205.6.dr, chromecache_275.6.dr, chromecache_215.6.dr, chromecache_199.6.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_168.6.dr, chromecache_165.6.dr	String found in binary or memory: https://telize-v1.p.rapidapi.com/location?rapidapi-key=mKTYRiJxjxmshhou6VAm18RBVSJkp1eyJLYjsn6w8rRmB
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_222.6.dr, chromecache_178.6.dr	String found in binary or memory: https://www.fmls.com/dmca
Source: chromecache_205.6.dr, chromecache_215.6.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_199.6.dr	String found in binary or memory: https://www.google.com
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_248.6.dr, chromecache_292.6.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_185.6.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV&ver=A.3.
Source: chromecache_252.6.dr, chromecache_282.6.dr, chromecache_186.6.dr, chromecache_277.6.dr, chromecache_229.6.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_205.6.dr, chromecache_275.6.dr, chromecache_215.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_199.6.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_193.6.dr, chromecache_221.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_185.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_185.6.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TLSCP7N
Source: chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.
Source: chromecache_263.6.dr, chromecache_289.6.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_227.6.dr, chromecache_281.6.dr, chromecache_282.6.dr, chromecache_277.6.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_178.6.dr	String found in binary or memory: https://www.realtor.ca
Source: chromecache_188.6.dr, chromecache_246.6.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_185.6.dr	String found in binary or memory: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_275.6.dr, chromecache_199.6.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_260.6.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLc13JuWdUfyAeG5cvsLe5FLEFvtgb12C9
Source: chromecache_185.6.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_164.6.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.10:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.10:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.10:50006 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@23/215@70/27

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kristalittle.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4528 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4528 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
http://www.smartmenus.org/	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://gmpg.org/xfn/11	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
i.ytimg.com	216.58.206.86	true	false	unknown
telize-v1.p.rapidapi.com	18.198.218.82	true	false	unknown
kristalittle.com	64.246.164.134	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
disutgh7q0ncc.cloudfront.net	13.32.121.5	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
static.doubleclick.net	216.58.206.38	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
zaplabs.map.fastly.net	151.101.2.133	true	false	unknown
youtube-ui.l.google.com	142.250.185.238	true	false	unknown
googleads.g.doubleclick.net	172.217.18.2	true	false	unknown
play.google.com	172.217.16.142	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.184.193	true	false	unknown
lb-moxi-pr.moxiworks.com	64.246.164.140	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
ghs.googlehosted.com	172.217.18.115	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
svc.moxiworks.com	unknown	unknown	false	unknown
eligibility.wootric.com	unknown	unknown	false	unknown
images.cloud.realogyprod.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
images-static.moxiworks.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR	false	unknown
https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js	false	unknown
https://kristalittle.com/wp-includes/js/wp-emoji-release.min.js?ver=782b628426a895c0dfd7727f0e7fb402	false	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	unknown
https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO	false	unknown
http://kristalittle.com/	false	unknown
https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c93875c6b21e.js?ver=A.3.49.20241022.0.6	false	unknown
https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-0703f4632eb5b4a19e7b065b249c746d.css?ver=A.3.49.20241022.0.6	false	unknown
https://svc.moxiworks.com/service/v1/auth/images/ajax-loader.gif	false	unknown
https://www.google.com/js/th/It53B4OXF04wOkLSwvG0idPTlSk2hAXwxFmUWIvLxEQ.js	false	unknown
https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJnvoiPEPddrP4Gced7dSNKYtMbP.jpg?width=500	false	unknown
https://www.youtube.com/s/player/a62d836d/player_ias.vflset/en_US/remote.js	false	unknown
https://disutgh7q0ncc.cloudfront.net/beacon.js	false	unknown
https://cdn.jsdelivr.net/npm/@moxiworks/project-vitruvius@0.0.21/build/project-vitruvius-icons.min.css	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://kristalittle.com/listing/AZ/Sedona/55-Rio-Verde-Circle-86351/193351038	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/NRE_Logo_Medium.png	chromecache_178.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/460-Juniper-Drive-86336/188726281	chromecache_185.6.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_275.6.dr, chromecache_199.6.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_286.6.dr, chromecache_164.6.dr	false	URL Reputation: safe	unknown
https://i9.moxi.onl/img-pr-001878/svv/1f9c3e87afd106ebce5ff244103ec0dce0873d60/1_3_full.jpg	chromecache_185.6.dr	false		unknown
https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c9387	chromecache_185.6.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	false	URL Reputation: safe	unknown
https://i13.moxi.onl/img-pr-001933/svv/b0714f891466a5527c57de0d02bf133bf39b9cbc/1_5_full.jpg	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/idx_alaska-35x36.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/TMI_Small.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_248.6.dr, chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/NJMLS_Small_Logo2021.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
http://www.smartmenus.org/	chromecache_168.6.dr, chromecache_165.6.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_193.6.dr, chromecache_221.6.dr	false	URL Reputation: safe	unknown
https://kristalittle.com/feed	chromecache_185.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/205-Scenic-Drive-86336/185503522	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/ERE_Logo_medium.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages?utm_source=places_js&utm_	chromecache_202.6.dr, chromecache_169.6.dr	false		unknown
https://maps.google.com/	chromecache_170.6.dr, chromecache_260.6.dr	false		unknown
https://www.youtube.com	chromecache_188.6.dr, chromecache_246.6.dr	false		unknown
https://i12.moxi.onl/img-pr-001999/arz/51ba2b3950684c63f971b86079a74ccb1b78a98d/1_2_full.jpg	chromecache_185.6.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_249.6.dr, chromecache_176.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/LBA_Logo_Medium.jpeg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
http://images-static.moxiworks.com/static/images/br/mls/MT-Reg.png	chromecache_178.6.dr	false		unknown
https://admin.youtube.com	chromecache_286.6.dr, chromecache_164.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/HGMLS-131x32.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Phoenix/18202-N-Cave-Creek-Road-5-Units-85032/199968172	chromecache_185.6.dr	false		unknown
https://listings.moxiworks.com	chromecache_185.6.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_290.6.dr, chromecache_268.6.dr, chromecache_284.6.dr	false		unknown
https://goo.gle/js-api-loading	chromecache_248.6.dr, chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_286.6.dr, chromecache_164.6.dr	false	URL Reputation: safe	unknown
http://images-static.moxiworks.com/static/images/br/mls/MMM_Logo_Large.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_221.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/powered_by_realtor_medium.png	chromecache_178.6.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/MFR_Small_Logo.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-0703f4632eb5b4a19e7b0	chromecache_185.6.dr	false		unknown
https://support.google.com/recaptcha	chromecache_229.6.dr	false	URL Reputation: safe	unknown
https://yurt.corp.google.com	chromecache_286.6.dr, chromecache_164.6.dr	false	URL Reputation: safe	unknown
https://i9.moxi.onl/img-pr-001999/svv/8634e82cc15472e695221e8d910dad2517e8bd63/1_3_full.jpg	chromecache_185.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/32-Running-Springs-Drive-86351/197100346	chromecache_185.6.dr	false		unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_248.6.dr, chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.4/blank.gif	chromecache_220.6.dr	false		unknown
https://developers.google.com/maps/deprecations	chromecache_248.6.dr, chromecache_202.6.dr, chromecache_169.6.dr, chromecache_292.6.dr	false	URL Reputation: safe	unknown
http://images-static.moxiworks.com/static/images/br/mls/GAM_Logo_Medium.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Cornville/1733-S-Sugarloaf-Road-86325/199677478	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/TMI_Large.png	chromecache_178.6.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_286.6.dr, chromecache_164.6.dr	false		unknown
https://kristalittle.com/neighborhood-news/	chromecache_185.6.dr	false		unknown
https://i4.moxi.onl/img-pr-001903/arz/0038c043219fbee97f1e33b9ba62fe2bda30cb88/1_15_full.jpg	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/PPMLS-logo-new-105x29.jpg	chromecache_178.6.dr	false		unknown
http://jscrollpane.kelvinluck.com/	chromecache_168.6.dr, chromecache_165.6.dr	false		unknown
https://i10.moxi.onl/img-pr-001977/svv/b7f463b5f442f1fe5da1cdeea60a317f9d64ae1c/1_2_full.jpg	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/FairHousingLogo-24x24.png	chromecache_178.6.dr	false		unknown
https://svc.moxiworks.com/service/v1/branding/images/bright_willow/map_house.png	chromecache_255.6.dr, chromecache_204.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/ERE_Logo_Large.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://i16.moxi.onl/img-pr-001999/arz/96afaaa4dfcd766b845bcd068f0e319dfe7f8b9a/1_2_full.jpg	chromecache_185.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/MTL-246X47.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Prescott/4722-S-Senator-Hwy-86303/194930570	chromecache_185.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/88-Chapel-Rd-86336/199882902	chromecache_185.6.dr	false		unknown
https://schema.org	chromecache_185.6.dr	false	URL Reputation: safe	unknown
https://kristalittle.com/listing/AZ/Sedona/57-E-Dove-Wing-Drive-86336/198413613	chromecache_185.6.dr	false		unknown
http://gmpg.org/xfn/11	chromecache_185.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/EBR_Logo_Small.jpeg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_252.6.dr, chromecache_186.6.dr, chromecache_229.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/EBR_Logo_Large.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/18-Disney-Lane-86336/189851571	chromecache_185.6.dr	false		unknown
http://images-static.moxiworks.com/static/images/br/mls/KVB_Medium_Logo.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/GLV_Medium_logo_cropped.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_184.6.dr, chromecache_286.6.dr, chromecache_164.6.dr, chromecache_251.6.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_290.6.dr, chromecache_268.6.dr, chromecache_284.6.dr	false		unknown
https://kristalittle.com/listing/AZ/Sedona/70-Ruby-Drive-86336/195291939	chromecache_185.6.dr	false		unknown
http://images-static.moxiworks.com/static/images/br/mls/KVB_Small_Logo.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_248.6.dr, chromecache_292.6.dr	false	URL Reputation: safe	unknown
https://images-static.moxiworks.com/static/images/br/mls/LBA_Logo_Large.jpeg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/TII_Logo_Large.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/GLV_Small_Logo_Cropped.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://github.com/dinbror/blazy)	chromecache_170.6.dr, chromecache_260.6.dr	false		unknown
https://images-static.moxiworks.com/static/images/br/mls/MLSGrid_Logo_Medium.jpg	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://svc.moxiworks.com	chromecache_185.6.dr	false		unknown
http://images-static.moxiworks.com/static/images/br/mls/GAM_Logo_Small.png	chromecache_222.6.dr, chromecache_178.6.dr	false		unknown
https://coldwellbankerhomes.com	chromecache_185.6.dr	false		unknown
https://i15.moxi.onl/img-pr-002005/svv/21a50f8f71f1b1fa70c1808f91b31d7862ffbf19/1_2_full.jpg	chromecache_185.6.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
142.250.185.102	unknown	United States	15169	GOOGLEUS	false
142.250.185.243	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
172.217.18.115	ghs.googlehosted.com	United States	15169	GOOGLEUS	false
64.246.164.134	kristalittle.com	United States	6295	GREENHOUSE-WAUS	false
172.217.16.142	play.google.com	United States	15169	GOOGLEUS	false
13.32.121.5	disutgh7q0ncc.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.184.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
18.198.218.82	telize-v1.p.rapidapi.com	United States	16509	AMAZON-02US	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
216.58.206.86	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.238	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
64.246.164.140	lb-moxi-pr.moxiworks.com	United States	6295	GREENHOUSE-WAUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.2.133	zaplabs.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.150	unknown	United States	15169	GOOGLEUS	false
142.250.186.65	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540674
Start date and time:	2024-10-24 00:49:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://kristalittle.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/215@70/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, sppsvc.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.184.238, 142.251.5.84, 34.104.35.123, 142.250.185.202, 142.250.185.131, 172.217.18.106, 216.58.206.74, 142.250.185.138, 142.250.185.170, 142.250.186.138, 142.250.185.74, 142.250.186.170, 216.58.212.170, 142.250.184.234, 216.58.206.42, 142.250.186.74, 142.250.185.234, 142.250.185.106, 142.250.181.234, 142.250.184.202, 142.250.185.200, 142.250.186.142, 142.250.185.72, 172.217.16.131, 142.250.186.78, 4.245.163.56, 216.58.212.163, 142.250.186.42, 172.217.16.138, 142.250.186.106, 172.217.18.10, 142.250.74.202, 172.217.16.202, 216.58.212.138, 199.232.210.172, 52.165.164.15, 142.250.184.227, 142.250.185.227, 20.242.39.171, 142.250.185.195, 93.184.221.240
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, maps.googleapis.com, clients2.google.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, maps.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://kristalittle.com/

Input	Output
URL: https://kristalittle.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Contact Me", "text_input_field_labels": [ "Neighborhood, City, ZIP, or MLS#" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://kristalittle.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Coldwell Banker Realty" ] }
	```json { "brands": [ "Coldwell Banker Realty" ] }
URL: https://kristalittle.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Contact Me", "text_input_field_labels": [ "Neighborhood, City, ZIP, or MLS#" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://kristalittle.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Coldwell Banker Realty" ] }
	```json { "brands": [ "Coldwell Banker Realty" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:50:34 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.980294554764508
Encrypted:	false
SSDEEP:	48:8SpbdZTAuH6idAKZdA1uehwiZUklqehQy+3:8SBU0vy
MD5:	8E227A9DD01070DEB23A675D78E0F252
SHA1:	50847A2C9C27F8C3B15014EE1F80C4EA3E0B5FCF
SHA-256:	2C6AEEE8D0B6445F4ACE60B4261F4DD876EFDCB66E849EB35311648FE8B25F7E
SHA-512:	D040970E4C2D71010DA71AF0FE67B76A37EE251623A93A910DBA3CEB9B66CB82E7CA8262E850A26C2B249C1478B7A998A485656241FEDC5D2A22937BF5346F43
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V...%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYR.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:50:34 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9975432433260263
Encrypted:	false
SSDEEP:	48:8epbdZTAuH6idAKZdA1Heh/iZUkAQkqehfy+2:8eBU69QWy
MD5:	F46D6FD29E6AC8F1E016583533417C9D
SHA1:	D8B0CB776F9F7D47ED7E953ED31F81E36F369A3B
SHA-256:	F290A9AE912E29E26A63FCF5F985406E0F28C03680C0480F8CCF66DEC9D50968
SHA-512:	3DEC02F5F984A937C6D7A327F8F48B471E0565F7254A1A6A6A399A8DC1B1DACC34E9BA2035FDE4C76377694F96902D58D20C00BBEE2866901E231D7949C57282
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}....%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYR.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.004781229101827
Encrypted:	false
SSDEEP:	48:8FpbdZTAbH6idAKZdA149eh7sFiZUkmgqeh7sVy+BX:8FBU1njy
MD5:	7E42D737F8B3E0B655FDB27888A0CC59
SHA1:	F30205D6564935E23598E4C6789E1D4184FC6583
SHA-256:	20A70BD028E16D059EEB1F10E9C90DE5797743DA33CEF040FB80256C473635EA
SHA-512:	B51B35A000309F7E4C0504005582E5D646A7209E1899A7A50A7282C18736F762C86DE0C32D3DCEE811B023172B9282C5D67BFF0E873D55BD9B023EDAF8DAA467
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:50:34 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9939960293406758
Encrypted:	false
SSDEEP:	48:8+pbdZTAuH6idAKZdA14ehDiZUkwqehLy+R:8+BUxdy
MD5:	E3965A90B0F123D68B7BB8C2C8228405
SHA1:	5403156781F33EC578ECAE042C5DFD99C45A6DD6
SHA-256:	D1DE4EF7A934984A437D20381D86D637216CB56A111A46881EA343BE3BE3E4F7
SHA-512:	D2A615DCE0AB33A86599E7F195525460E8746F44D3AF23C1DB69460E075B90670A90E289C48061B8A44F12CA54B1CFE5192CFCFA6F1305DC0240A0F4279D0E60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{...%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYR.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:50:34 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984669386077507
Encrypted:	false
SSDEEP:	48:88pbdZTAuH6idAKZdA1mehBiZUk1W1qehJy+C:88BUB9py
MD5:	EAC76AF8B7FDDB27B9FBE6B82FE97788
SHA1:	270F0C5BCC284717CD08B3FA0AE7820EE610ECD8
SHA-256:	F6233DE7B2CEDA2BCF9E64B4D6B1571CD2FFFEC7ED36AD706F62D9B082B3C192
SHA-512:	C803C1EF5F1379DB97A7BACA5D5DCBBDD3FF56B24ACC4BF50A1A0479B8078922D7F36885C556408E19972E82F0B27BC5A657F8714759E12B8C4C5F19FF041F08
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....!...%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYR.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:50:34 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9925854486491295
Encrypted:	false
SSDEEP:	48:84pbdZTAuH6idAKZdA1duT1ehOuTbbiZUk5OjqehOuTbjy+yT+:84BU4TyTbxWOvTbjy7T
MD5:	978223D8ACDCC332146D6374F5766413
SHA1:	7559958A78D28A6B6E4EFEEA8F2A6B9246CCD89D
SHA-256:	2CC09A8161B26A78E64409539A288BA811BA25812CEBB7BAEFC6DF19E06A39FB
SHA-512:	6E3703EF08B57A619521D3556C4F91308246F3EA647A6FAE514E2B1186E81410305051CC6699A041D7B17405279D8AF89D3EAF4152EEB4C2CEE5207CC47685DB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWYP.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYP.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWYP.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWYP............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWYR.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2466682
Entropy (8bit):	5.604915728894778
Encrypted:	false
SSDEEP:	24576:w+ZVY+A5VuzALqKon0U5MrWT2ZrrG/A1b3C0ugqARiTR:H3Y+A5VukLqK85Mr02ZrrX1j3u
MD5:	6D27386CDC145C245B4D12BCDEE3A9DC
SHA1:	9D4A0A8EBE46C740C47524BF296828AEDED91968
SHA-256:	251E20FCBB08A1CEC88ED5A0D011178A5F6E9BF2E11F103E83FA5F6F84DB73D8
SHA-512:	CFBC976944A9C15CAE871A5AE44D7FD01B76B8FEB53F8E6A42762D6C2D78FDAB05069131303DF7C5E4205CFA1D1F5DBF0823B2BE26285B6AC414843DF54D28B8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	downloaded
Size (bytes):	166276
Entropy (8bit):	5.360556770566957
Encrypted:	false
SSDEEP:	3072:z+mgUC7GBGYGparpIW8cwaYGN2pHZMvy/YcLqQdSH9JiYj5:IVaccwaYGN2Z//Y1QdSH9JH
MD5:	58ECFB1023A458F240BDA1821BEA07BA
SHA1:	36B00A344D9F5BC8529B516B39AB2275D119901A
SHA-256:	44456B6C14A7BBC914BBBBAFFD8B9B5F6B835CB949062ADADBCA8943FBFA1EE5
SHA-512:	3DA9A32377E259086A011BDC629B5E5E6107D88DB83097F7F2D7705F7952E0C4F23EB284DC678131DF46F298B882150C9AA03ED3ED814D318DD1DA18BFAA5FBF
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c93875c6b21e.js?ver=A.3.49.20241022.0.6
Preview:	var SreHttp;SreHttp=(function(){function SreHttp(name){this.queue=new $.ajQueue();this.name=name;}.SreHttp.prototype.post=function(options){var _ths;_ths=this;if(options.queue==null){options.queue=true;}.options.timeout=options.timeout\|\|30000;if(options.queue){return this.queue.add({url:options.url,method:"POST",data:options.data,timeout:options.timeout,success:function(res){if(!options.mute){log(options.name,[options.url],[res]);}.if(typeof options.success==="function"){return options.success(res);}},error:function(x,y,z){log("ERROR",options,x,y,z);return _ths.displayError(options.url);}});}};SreHttp.prototype.ajax=function(options){var _ths;_ths=this;options.dataType=options.dataType\|\|"jsonp";if(options.queue==null){options.queue=true;}.options.timeout=options.timeout\|\|30000;if(options.queue){return this.queue.add({url:options.url,dataType:options.dataType,timeout:options.timeout,success:function(res){if(!options.mute){log(options.name,[options.url],[res]);}.if(typeof options.success

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	3719
Entropy (8bit):	7.861665767007222
Encrypted:	false
SSDEEP:	96:EHVAXCyxaOyNQtm6xM7O+rqtUZaIQk1t5YR:aAyyxz/VM6sCAQkj5YR
MD5:	1C4EF32A5AFFCC97B1E4E7A20C6B24E6
SHA1:	4A1A555A3B6917003FF0B130AA728B4932BBA315
SHA-256:	6E84993264636ECB43AB0CA1C7A1369213D30ABC408DADDA8AE15DA6524927CC
SHA-512:	C9BB34E34287D563E6ADE775A24D7EC474F7E2A3811F7B596A735112EA746F1020959C3BC55C79009830BD9E73B40D8D61BA4E75AF43AD73D86AD960F9918EB5
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D..........................................F............................!...8Wv."1A.......24Rw..BGQ.#%3Uabq.....................................<...........................!1AQRq..24Sas....."Cbr......3..............?........CFR4uQ!..%.QQ+......T.6..I%.$$..n1Sg../}u*+...3W?l&..................._..~.c.s.G.+.\|I......N...../....s.}h......'.........._.....\......'..O..5;o...GL....1.....+.N..H.H6jv.C...\|...c.s.G..W...>.l....2.\...2..80..;.#.....@.......d.[....-..-....B7m..Rnx\c...RR..(..v........ ..C%..a2.,...r...s .v ...\q.......`<..l4..N@..a.$.......a~...c..O&o..d%1.d/,\D.uijJy\.a..=....Q.l:.Q.....$\]f.M.....CI.q@.'..;.in.$F.........z/.........(...\|e..:7+....z#...5.'S....&mT!.j2.hp.J...][........j!..E...t...Ma%...pDi.C..m..TT...K).....".\|z..H..@.r..E...$...........>...'.6...&...0..,.J..........].3.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 15
Category:	dropped
Size (bytes):	3951
Entropy (8bit):	7.70540879288643
Encrypted:	false
SSDEEP:	48:MdXaufkCq9TwLlETYVhZ6xoNcv/ZAdWDIOF6BAi+M/7M51b8NyS+HRory4djtPXA:xihSTTTYVhZy9no9Q5JqL+N4TP6i
MD5:	674DA56466C7B4EFC2DA99257BAECE22
SHA1:	1C4631DD3983DE1CE40F00FAE426B0B28B11C24A
SHA-256:	C85AB34C0FFC6A71386C7E0EF87386F203992B46A3F519510F40545717F85400
SHA-512:	BFF4CA70DBF348EF1616ADA2CEA4569504F5AA8D247D1177846B23FA02B1F2B5D890169EBE1E0E3FD7BA23E9D42400D8D490B98FD04D744BA3D1B8A751C2872D
Malicious:	false
Reputation:	low
Preview:	GIF89a..........DDD.....oooDDD......!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,................=...\|...7........YI....k......@.N.#..6Z.vd.tE'.y.V.J.49...W.5.]...oY.^..j..,g.>......~.Xxb....iw..v...............................................................................................................p ...!.......,...............".....^.1...YI...L[j[..&....u.....mF.N.c.......T...5imv._..&...e[..=...)z...-.~....}f.fy.iwrunp..........v...................................................................................................{.^.......!.3...A...!E...Vd. ...!.......,................='j..........X....W.L....Y...xz.......b.X.H#6.L.S.......tEqSp...j.=.p..B.e.M..x....iuyr..wz.~~......k....pd..q...................................................................................................O^Az......A...*.X.b.`.0d....^...>b...>.....!.......,................=..t"........Wj.7..YI.;......6..9.O.4.B............n"i.z.%..eX.%b

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	dropped
Size (bytes):	166276
Entropy (8bit):	5.360556770566957
Encrypted:	false
SSDEEP:	3072:z+mgUC7GBGYGparpIW8cwaYGN2pHZMvy/YcLqQdSH9JiYj5:IVaccwaYGN2Z//Y1QdSH9JH
MD5:	58ECFB1023A458F240BDA1821BEA07BA
SHA1:	36B00A344D9F5BC8529B516B39AB2275D119901A
SHA-256:	44456B6C14A7BBC914BBBBAFFD8B9B5F6B835CB949062ADADBCA8943FBFA1EE5
SHA-512:	3DA9A32377E259086A011BDC629B5E5E6107D88DB83097F7F2D7705F7952E0C4F23EB284DC678131DF46F298B882150C9AA03ED3ED814D318DD1DA18BFAA5FBF
Malicious:	false
Reputation:	low
Preview:	var SreHttp;SreHttp=(function(){function SreHttp(name){this.queue=new $.ajQueue();this.name=name;}.SreHttp.prototype.post=function(options){var _ths;_ths=this;if(options.queue==null){options.queue=true;}.options.timeout=options.timeout\|\|30000;if(options.queue){return this.queue.add({url:options.url,method:"POST",data:options.data,timeout:options.timeout,success:function(res){if(!options.mute){log(options.name,[options.url],[res]);}.if(typeof options.success==="function"){return options.success(res);}},error:function(x,y,z){log("ERROR",options,x,y,z);return _ths.displayError(options.url);}});}};SreHttp.prototype.ajax=function(options){var _ths;_ths=this;options.dataType=options.dataType\|\|"jsonp";if(options.queue==null){options.queue=true;}.options.timeout=options.timeout\|\|30000;if(options.queue){return this.queue.add({url:options.url,dataType:options.dataType,timeout:options.timeout,success:function(res){if(!options.mute){log(options.name,[options.url],[res]);}.if(typeof options.success

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4790)
Category:	downloaded
Size (bytes):	47932
Entropy (8bit):	5.537220353892626
Encrypted:	false
SSDEEP:	768:HHjSdlborb3JFLm97ZM+WytEvJbW5jOu/R0fsl8X28jOu/1tN6qvsM/VsN0JWMYA:BOubScA8W+W+XfWgirVKttO6Hv1
MD5:	4E6E42CB0EB1174A39D830346BDB7EC2
SHA1:	119ABC666507C202BE6E2E3B1B952F4EE35C06D5
SHA-256:	3DF66B5168FAA329B23A610D6F8933CD12DB195D2D3C00639ED42D59FEFC4587
SHA-512:	9D6C78711218B9D3CB71E4E9EBB0E6CB755B3C23F02E5DC60A59517B740E8828B3956C283BFC8CF7A05622D758B783A9C049666717FCDDA852B7296F0C5ED0E8
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/places_impl.js
Preview:	google.maps.__gjsload__('places_impl', function(_){var mrb=function(a){try{return new URL(a,window.document.baseURI)}catch(b){return new URL("about:invalid")}},nrb=function(a,b){const c=b.createRange();c.selectNode(b.body);a=_.Ye(a);return c.createContextualFragment(_.We(a))},orb=function(a){a=a.nodeName;return typeof a==="string"?a:"FORM"},prb=function(a){a=a.nodeType;return a===1\|\|typeof a!=="number"},o9=function(a,b,c){a.setAttribute(b,c)},qrb=function(a){return a.Du.map(b=>{const c=b.Zg;return`${b.url}${c?` ${c}`:""}`}).join(" , ")},srb=function(a,.b,c){const d=orb(b);c=c.createElement(d);b=b.attributes;for(const {name:h,value:k}of b){var e=a.Fg;var f=e.Eg.get(d);e=f?.has(h)?f.get(h):e.Gg.has(h)?{Ik:1}:(e=e.Ig.get(h))?e:{Ik:0};a:{if(f=e.conditions)for(const [m,p]of f){f=p;var g=b.getNamedItem(m)?.value;if(g&&!f.has(g)){f=!1;break a}}f=!0}if(f)switch(e.Ik){case 1:o9(c,h,k);break;case 2:a:if(e=void 0,_.Jda){try{e=new URL(k)}catch(m){e="https:";break a}e=e.protocol}else b:{e=document.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11396)
Category:	dropped
Size (bytes):	379784
Entropy (8bit):	5.384668942080203
Encrypted:	false
SSDEEP:	6144:5L2/jmwkbfRDbnzFSYeLoptx4xlrOsbObrQrPU+L3+8prjN/2dl3:5LnVvJtx4xlrQoPZ3+8prEdl3
MD5:	4A009CAE722901F8D0DBDF4B1F0745C8
SHA1:	DC62846E2BF3626EAF4661F725F55185250E82E2
SHA-256:	FEABC64B8E95E52F19023D58ADAB2BA2868B9971929FDB8AD84ED461BAA24DFA
SHA-512:	5547A3D02A7FF5F1FFE1F2242AB5F4B99473B1AD4CD91F1F53D6819DD99A87A0F21F91FA6544C5E5466804B8D0304A0F1275DB3459E85BDB066B4CFC5E802276
Malicious:	false
Reputation:	low
Preview:	;(function($){$.flexslider=function(el,options){var slider=$(el),vars=$.extend({},$.flexslider.defaults,options),namespace=vars.namespace,touch=("ontouchstart"in window)\|\|window.DocumentTouch&&document instanceof DocumentTouch,eventType=(touch)?"touchend":"click",vertical=vars.direction==="vertical",reverse=vars.reverse,carousel=(vars.itemWidth>0),fade=vars.animation==="fade",asNav=vars.asNavFor!=="",methods={};$.data(el,"flexslider",slider);methods={init:function(){slider.animating=false;slider.currentSlide=vars.startAt;slider.animatingTo=slider.currentSlide;slider.atEnd=(slider.currentSlide===0\|\|slider.currentSlide===slider.last);slider.containerSelector=vars.selector.substr(0,vars.selector.search(' '));slider.slides=$(vars.selector,slider);slider.container=$(slider.containerSelector,slider);slider.count=slider.slides.length;slider.syncExists=$(vars.sync).length>0;if(vars.animation==="slide")vars.animation="swing";slider.prop=(vertical)?"top":"marginLeft";slider.args={};slider.manual

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	33948
Entropy (8bit):	4.883713307550517
Encrypted:	false
SSDEEP:	768:E68TiPDemfFpe+AnVzfx3wybWwRIf6C2ewxrcABrAavJ2kXBFhnPGssAOspJfsn9:E68TiPDemfFpe+AnVz1bWwRIf6C2ewx6
MD5:	6CA665841E133E2660080727B38FA55E
SHA1:	CD5A5E0B0E82297621E922A18B83AC833A8983E8
SHA-256:	DE9843B43586D4CBAF0501337110A82AF340F231289B9FF17A46966C98842E6C
SHA-512:	3987DAD760FCDD05E53B059916AB667A612D5A1A3CC6117289199AED0202AF4F77EEA6843D27F535B5BB4B24533277AE7AE23D857A23E62F5C7C26B7D23A5F54
Malicious:	false
Reputation:	low
Preview:	//Saved - 1800 lines on : svc16-pr : 2024-01-16 19:39:11 -0800.var google_bypass = [.. {.. geospatial: true,.. lat: 47.5984551,.. lon: -122.14608240000001,.. name: "Lake Hills, Bellevue, WA",.. type: "Solutions",.. zoom: -1,.. bounds: {.. northeast: {.. lat: 47.63305727084875,.. lon: -122.05902451079584.. },.. southwest: {.. lat: 47.569858627681846,.. lon: -122.20133179228998.. }.. }.. },.. {.. name: "OR",.. lat: 44.0521,.. lon: -123.0868,.. type: "State",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Fayetteville-Springdale-Rogers, AR-MO",.. lat: 36.262501,.. lon: -94.467407,.. type: "County",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Old Town, Lake Oswego, OR",.. lat: 45.41211699999999,.. lon: -122.6623342,.. type: "Neighborhood",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Forest Highlands, Lake Oswego, OR",.. lat: 45.430238,..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	downloaded
Size (bytes):	40504
Entropy (8bit):	5.451112686526668
Encrypted:	false
SSDEEP:	768:SAwhvnUKU1hxOWc4saHT2R8omfiaGaiNXuk9xuvNRX9Tcmaj:khMKUW4saXomfN9NTIj
MD5:	772DF42E980CA94A11799D9F78C5F347
SHA1:	B62D88619FB4BDE4EC6FC4BDB87ACA2C6E7EC058
SHA-256:	793952039D38075B96DFD76C5CB10A4D67A7120C9DFE3C5617C0D62BE3E5E7F6
SHA-512:	278712F0210DC8A3D6624A3E0E5B7B4B7417660BB0BF916A1B215B19A7C4B21554AE8D43E172B1CA42BCBA2C94A090CC7ACA8836B724306BEEAF5B3090463AC5
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/auth/javascripts/iframelogin/jquery.iframelogin.min.js?ver=A.3.49.20241022.0.6
Preview:	/. Colorbox v1.4.31 - 2013-09-25. jQuery lightbox and modal window plugin. (c) 2013 Jack Moore - http://www.jacklmoore.com/colorbox. license: http://www.opensource.org/licenses/mit-license.php./.(function(e,q,u,y,X,R){function D(a,b){var d=typeof a[b];return"function"==d\|\|!("object"!=d\|\|!a[b])\|\|"unknown"==d}function na(){if(!U(navigator.plugins)&&"object"==typeof navigator.plugins["Shockwave Flash"]){var a=navigator.plugins["Shockwave Flash"].description;a&&!U(navigator.mimeTypes)&&navigator.mimeTypes["application/x-shockwave-flash"]&&navigator.mimeTypes["application/x-shockwave-flash"].enabledPlugin&&(Y=a.match(/\d+/g))}if(!Y)try{var b=new ActiveXObject("ShockwaveFlash.ShockwaveFlash");.Y=Array.prototype.slice.call(b.GetVariable("$version").match(/(\d+),(\d+),(\d+),(\d+)/),1)}catch(d){}if(!Y)return!1;a=parseInt(Y[0],10);b=parseInt(Y[1],10);ha=9<a&&0<b;return!0}function ca(){if(!P){P=!0;for(var a=0;a<c.length;a++)c[a]();c.length=0}}function M(a,b){P?a.call(b):c.push(function(){a.call

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	66550
Entropy (8bit):	5.604051848608442
Encrypted:	false
SSDEEP:	768:CQugoLs+1AK2AEUPCixybccFth66sEiomMD6/t/H+ZLZBmbjLDWA:Nuga+i82//t4A
MD5:	FEC04F0E80C1844F68D1E1413D1D142C
SHA1:	C5E13B890B4D18068718C9D421D9A2277CE043BC
SHA-256:	C97487D578DD5335D7267FF1F1C6B00948A199A58A2EACD1E963F791A2DA720E
SHA-512:	B25D825EF10FC69597AE26C1DAE42C32FEBCBA820BE940536A52D58E46F4308788C076CF42E7F95E8F5C5FA485EB3DEC025C4123CE8FF04CEDAAB35F619FCCB6
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Kib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.dR(a)},Lib=function(a){g.Zo(a);.for(var b=0;b<a.hg.length;b++){var c=a.hg[b],d=a.fz[b];if(d!==c.version)return!0;if(!g.Xo(c)\|\|c.Vm)if(c.Vm\|\|c.v_!==g.bp)(c.P1(c)\|\|Lib(c))&&c.Q1(c),c.Vm=!1,c.v_=g.bp;if(d!==c.version)return!0}return!1},q4=function(a){var b=g.Vo(a);.a={};return a[Symbol.dispose]=function(){g.Vo(b)},a},r4=function(a,b){for(;a.length>b;)a.pop()},Mib=function(a){a=Array(a);.r4(a,0);return a},Nib=function(a,b,c,d){(d[b]\|\|d.__default)(a,b,c)},Oib=function(a,b){this.j=null;.this.B=a;this.key=b;this.text=void 0},Pib=function(a,b,c){b=new Oib(b,c);.return a.__incrementalDOMData=b},s4=function(a,b){if(a.__incrementalDOMData)return a.__incrementalDOMData;.var c=a.nodeType===1?a.localName:a.nodeName,d=a.nodeType===1?a.getAttribute("key"):null;b=Pib(a,c,a.nodeType===1?d\|\|b:nul

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65462), with no line terminators
Category:	dropped
Size (bytes):	1038867
Entropy (8bit):	4.916972500022695
Encrypted:	false
SSDEEP:	24576:iqF89FIgR8SVqY5l6ym87qXVMkVCLNoQuMSwMwylBM9nC3t6SUvknQm6kUNz6Hx5:GnzET
MD5:	B87DBEF8B4B80E5FEDCAC8E4D9FA4D59
SHA1:	F4F96643B045A0821403111EEE263E39A7165F6F
SHA-256:	C4DACBA9B99C679D2C45320B5EA2B6A3640E6CC2A4A9D4F95E53875DDC5D136B
SHA-512:	755703F4636A5CF421418F102FA514F3FD4E490FDEBA3638F56537F3F4608FE49949481FCDA1E298D4551D0C510A09292A904673498B5F23EB93F360822BCBEC
Malicious:	false
Reputation:	low
Preview:	/**/jQuery3710923492156920481_1729723842516({"status":"success","data":{"result_geo":null,"result_type":"MlsDTO","wms_svc_common_version":"2.11.11","request_uri":"https://svc.moxiworks.com/service/v1/profile/mls?callback=jQuery3710923492156920481_1729723842516\u0026send_from_agent=true\u0026from_aws=true\u0026from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com\u0026source=agent%20website\u0026source_display_name=Agent%20Website\u0026site_type=Agent%20Website\u0026_=1729723842517","number_found":772,"number_returned":772,"wms_dbcnt_ms":142,"wms_model_version":"5.0.2","wms_db_ms":0,"wms_pkg_ms":0,"result_list":[{"dom_available":true,"days_on_market_label":"Days on Market","name":"ABERDEEN MLS","abbreviation":"ABD","mlsid":723,"mls_agentid":null,"name_display":"ABERDEEN MLS","data_available":true,"extra_disclaimer":"","disclaimer":"Copyright 2024 Aberdeen MLS. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for consumers. persona

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-includes/js/wp-emoji-release.min.js?ver=782b628426a895c0dfd7727f0e7fb402
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1616
Entropy (8bit):	7.821219532830218
Encrypted:	false
SSDEEP:	24:l/G8w7mPxHQLXmDXvM8uZCDcG8SPQ0QNwnvtc/hVO/74xm3O55d4TIDQWznFE:lG37mPy7ivM8ugtHPOwvOhV4TUDQWZE
MD5:	F28A13545CA7BE5CD9EA31BDD9EA7F8E
SHA1:	F4F45A59720B9D637B1E7E0ED5783EE84887287F
SHA-256:	CD80D0DCB2A44BD30C11FCDF13D4C280F336DAD9442EE7DA79146F2BB77381A4
SHA-512:	9CA538FA15BB54A36A149EF63E1CC24608F022BFCF667A9C5656AF99E144306A171FC7EDB8C12D093433C3D532A8090085BC6EFEB26180505F0833360C689B37
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
Preview:	.PNG........IHDR...x.................IDATx....x.[.........@.0C...ww..Z......4....P......{.u....O.y.;..JN<.`.......T.$...?...p..P..{.....j6..@.a.&.@.N+....V$....H.R..N}.....C..@(..u..?T...@.f#o.......m..i.B..a+.j..m\|...3....#i..p...'...N.n..I..c..4s...:.r..dr).~.sI..(...L...x1...&\..........h...3p..A...`!..1DQ.y.l..F.O.".#..J0G+...P....nF.b...l@......GR..B...}+.N.@.[7....?...7....x..l#;....t..H\|..p...#.9UP6..j+....Xl...l...1..!..>`z..ozF.-.{...yPB....%..VC..}x".".=X.E.5..E.../n...X.N.B....x..hA=V....Ab..O.bXx........i....Alr..OP.n(....7..J...`...`....2>'..X..()s.oN.h<...z.o.....%`r.\.)6....M5...+.....D.V.6..Hn.......g.?>.j..O.0-..><.v..Y+..[1./........<..(@.N..vV....z...!..=.3...=&.!.B.$.z...H....B......._......_p...'..L.O).P.q./.w...}.....C(n.......Y.,......?....]:.0.(.....0E_...I..Bm.bx,.. O[^....c!.X..Vc-^.".L..\.....b.L....\|...J.y.....c)z'.VbF.\'...'o..(S..L...61.....T.~.t.bj...*(...I...N.......p..S..4.....I...%.iO.>...p.6

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	3.8458993456573842
Encrypted:	false
SSDEEP:	6:1i3H0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0sZ:1i37
MD5:	C6DB6CE02D811D085A191784A276A142
SHA1:	9F34A4DC35B828294E98E56DFE158F88617FB367
SHA-256:	E877F1FFDB7CCFB02B0EB0ACB2917069E77CA3D2B475EBF04E5298F1D3A43612
SHA-512:	11F63D7A3C791F4C56082183AC66C249B882E829FC9821E0908B719BC7FE065FC6BA6D2D0EBEE55E214395294AF4BD05EB95382F59243B24798CDD838E8517EE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSowEJE6Vc0r82mxESBQ2RYZVOEgUNkWGVThIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_?alt=proto
Preview:	CsYBCgcNkWGVThoACgcNkWGVThoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoA

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	7.821219532830218
Encrypted:	false
SSDEEP:	24:l/G8w7mPxHQLXmDXvM8uZCDcG8SPQ0QNwnvtc/hVO/74xm3O55d4TIDQWznFE:lG37mPy7ivM8ugtHPOwvOhV4TUDQWZE
MD5:	F28A13545CA7BE5CD9EA31BDD9EA7F8E
SHA1:	F4F45A59720B9D637B1E7E0ED5783EE84887287F
SHA-256:	CD80D0DCB2A44BD30C11FCDF13D4C280F336DAD9442EE7DA79146F2BB77381A4
SHA-512:	9CA538FA15BB54A36A149EF63E1CC24608F022BFCF667A9C5656AF99E144306A171FC7EDB8C12D093433C3D532A8090085BC6EFEB26180505F0833360C689B37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.................IDATx....x.[.........@.0C...ww..Z......4....P......{.u....O.y.;..JN<.`.......T.$...?...p..P..{.....j6..@.a.&.@.N+....V$....H.R..N}.....C..@(..u..?T...@.f#o.......m..i.B..a+.j..m\|...3....#i..p...'...N.n..I..c..4s...:.r..dr).~.sI..(...L...x1...&\..........h...3p..A...`!..1DQ.y.l..F.O.".#..J0G+...P....nF.b...l@......GR..B...}+.N.@.[7....?...7....x..l#;....t..H\|..p...#.9UP6..j+....Xl...l...1..!..>`z..ozF.-.{...yPB....%..VC..}x".".=X.E.5..E.../n...X.N.B....x..hA=V....Ab..O.bXx........i....Alr..OP.n(....7..J...`...`....2>'..X..()s.oN.h<...z.o.....%`r.\.)6....M5...+.....D.V.6..Hn.......g.?>.j..O.0-..><.v..Y+..[1./........<..(@.N..vV....z...!..=.3...=&.!.B.$.z...H....B......._......_p...'..L.O).P.q./.w...}.....C(n.......Y.,......?....]:.0.(.....0E_...I..Bm.bx,.. O[^....c!.X..Vc-^.".L..\.....b.L....\|...J.y.....c)z'.VbF.\'...'o..(S..L...61.....T.~.t.bj...*(...I...N.......p..S..4.....I...%.iO.>...p.6

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	392635
Entropy (8bit):	5.180172392119847
Encrypted:	false
SSDEEP:	1536:ENG8ZHMsTtkmgV3B8ILvPptpZ8p7M6oya+MOn4y6Ox5juDEnXrDJc7MsBy/n+TEI:ENG8ZUmgZB7GoyVufJGc8QoGN
MD5:	ED3519EEDCB17885736F4460D07E3226
SHA1:	D4F08D8456BA81DB45E97383D1384BFD4E8D6699
SHA-256:	30F433E272D8D6BF5437749A5B91004B217118CF09B69FF9302D11A30B5B4C64
SHA-512:	379D69E54B0CAEF79867149E29C6A09940353F8FCFE776A9AED67B1695C742BD94B0646F1AED5BE9BDCACBD076438849738EACD2363829D3864861FD350F4DF8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	338546
Entropy (8bit):	5.6204088260624845
Encrypted:	false
SSDEEP:	3072:l4pK/29sqrXt9NJfGsO46emQsgyhKLeVKQS6x7m3QO7wQvN9td4/jGs7:l4p8yrXt9NJfMISVKQ/kQO7Bvbtev
MD5:	7B71C32F45994A7716C9A352ED0097DB
SHA1:	E4E31E1573DF87DF5FB617BC5AD18DF253CF6404
SHA-256:	D0443342FBDD2B577536B4944C0635F7558C489C9946531B239A16CBF89FC5D9
SHA-512:	69387B897CA310716F2847C288461E3E22E945EDC7889F03FDE3E04D4CBE3B4E2564EA99C2D5020593A219B08F44D14E091A0FAAB58B98835183CDFCC86B79B8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64821)
Category:	downloaded
Size (bytes):	287138
Entropy (8bit):	5.5175815362420995
Encrypted:	false
SSDEEP:	3072:4i+G7oud4hh1XjAamoUDnqjSCU78t8LlOWZcdCHarMcNv2x/EuUqbf:49bUD57m8oWZcsyMc2/EuUO
MD5:	F29B79E920C8D9E078D824C1A8A40A89
SHA1:	C445101842B5A5B012B789F6D4ADB710A7D865F5
SHA-256:	9C2CB660FB7A0DA79966A7A31373A178E4EA76C50A4E4F535D590D7BD3F53591
SHA-512:	16131A60B2CE72EC19CC25E755524AFD8A069D4D8D84DC34EAE8C60F8928FB6DBBA7A6CB9DEEDBD32892EB05547FEE10BA91E17A76C4F50046B7704452F23575
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/
Preview:	<!DOCTYPE html>. <html lang="en-US">. <head>. <link rel="icon" href="https://images-static.moxiworks.com/static/images/br/cbwest/CB_Favicon_144x144.ico"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <meta name="format-detection" content="telephone=no"/>. <meta http-equiv="content-type" content="text/html; charset=UTF-8" />. <link href='https://fonts.googleapis.com/css?family=Roboto:300,400,700' rel='stylesheet'> <script type="text/javascript">. var Branding = new Object();. Branding.result_list = {"fonts":[{"name":"font_1","color":"#ffffff"},{"name":"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"secondary_body_font","color":"#333333"},{"name":"primary_background_font","color":"#ffffff"},{"name":"secondary_

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019706801697464
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOI3buhXwW4nxM:mGRFauOxLA/+IcTOZX/
MD5:	68DF4E65BB75C72BB2DE801EEBEEC9C9
SHA1:	76462F14972C57A6DDD6EB1FE624EF226A7DBC37
SHA-256:	AF772A1084C1E08E7A7B0A650DE797CB14337EA9BA8FEE556BD44DB8E0DBE1DE
SHA-512:	3482D7A1803045B83001BB180548E8E125D8F48386DE46804CB4BCE6B842C545282966A7E6F0F137C2661328C4D0D99A6301A302312591F03728135FADDE211C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	31298
Entropy (8bit):	5.397449310960436
Encrypted:	false
SSDEEP:	768:z2tlrp6y5+BHm4C4N1hmv0O/zrSO6/K3iM:Stlrp6y5+BGGLy/t6/K3iM
MD5:	686F51DAA7B9FE4FCAE3BD50C5064CAD
SHA1:	60ACDF3C278B8E665A05C88E2F191BC240644C11
SHA-256:	8F2C4BCB919E31182646D5E52650914F15A9CC8FF0847D30C4DC4ADCD4C2653C
SHA-512:	0ED84320BB3AAF13751E476CE5D8290A3D31E5C77B83074FF9F33EAB4BF8A268FB919E89F464FA2E98A78FC5CBFB5016CD6502AB01285A9878020A4BD23646F8
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	3.9418533586893916
Encrypted:	false
SSDEEP:	6:P3H0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0s0z:P3O
MD5:	B64A2651B627DA861EEE80F88E92F255
SHA1:	335855E516209CB0953732636B50C37DB4CEA2C2
SHA-256:	50CB41D4C79E9D15E1CF601C6A68EA5B0DD9D0C089C626D9B62A9C1FD88A7D59
SHA-512:	404A71CB06A13FCA31ED78F5F57682F7153385A699366414C821C024A0C9812B116202AF56B46C13D7ED4070DC50CF9455094C991B8F81218AB3037A34D3413C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSqgEJSdeNfGGSwA4SBQ2RYZVOEgUNkWGVThIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNBu27_xIFDQbtu_8SBQ0G7bv_EgUNU1pHxQ==?alt=proto
Preview:	Cs8BCgcNkWGVThoACgcNkWGVThoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNBu27/xoACgcNU1pHxRoA

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	dropped
Size (bytes):	300905
Entropy (8bit):	5.482945781545427
Encrypted:	false
SSDEEP:	6144:KVIvj27tfrDxyExsO40FyYZNgYCsGsRt0lcvm4N8W3VrQqDW+/fMheYULy/:KVIvj27drDxyExs50FyYEYYlcvm4Nt3U
MD5:	B0E91380D8D1FE01441DF47457D93211
SHA1:	F2E55BA7F64CE135DE25CEB1CA6B723DAC4D938B
SHA-256:	22D7B487C7ED16B6DB70AE6AAD638E15244B54CDF550AD8F0ADD612FCF1B1C69
SHA-512:	5F86A8634DB341D866BDA45EF127B00EDF696B5E2428BFB9EECCD64938202DC1DDE6CEB1505F057928AA828D0F528B88D15F49E65DD79DBDA658154F57A4FC4F
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var ega,fga,gga,hga,iga,jga,kga,lga,mga,nga,oga,qga,gr,sga,tga,mr,nr,vga,rr,tr,wr,wga,xga,yga,zga,Aga,Rr,Cga,Dga,Ega,Fga,Ur,Wr,Xr,Iga,Lga,Nga,bs,ds,Pga,Rga,Sga,Tga,Xga,Is,$ga,cha,fha,Ws,hha,gha,kt,lt,kha,nt,lha,mha,nha,oha,pha,qha,rha,sha,wha,xha,Aha,vt,Bha,wt,Cha,xt,Dha,yt,Bt,Dt,Fha,Iha,Jha,Lha,Pha,Qha,Kha,Rha,Tha,Uha,bu,Wha,Yha,$ha,mu,dia,Su,mia,oia,nia,sia,uia,xia,yia,zia,Aia,Bv,Hv,Fia,Iv,Lv,Gia,Mv,Hia,Pv,Tv,Nia,Oia,Qia,Sia,Ria,Uia,Tia,Pia,Via,cw,Zia,$ia,aja,hw,bja,Ija,Mja,Oja,Qja,dka,ry,Cka,Gka,.Eka,Jka,Nka,Oka,Wka,Xka,Yka,Zka,Ry,Sy,bla,cla,dla,ela,Ty,Hr,Gr,Mga,lr,uga,as,$r,Zr,Hga,Jga,Vy,Oga,Qga,Lx,Mx,gla,Nja,Kx,Nx,Uga,Vga,Rja,Wga,aha,Zy,hla,az,bz,ila,jla,lla,dz,mla,nla,fz,gz,ola,pla,iz,qla,jz,rla,sla,mz,tla,oz,ula,vla,qz,wla,xla,sz,tz,uz,vz,yla,zla,Ala,tha,vha,Fla,Gla,Hla,Ila,Jla,zz,Bx,Mla,Nla,Ola,Pla,Nha,Jt,Qla,jka,Bka,uka,Zt,aia,gu,Rla;_.dr=function(a,b){return _.aa[a]=b};ega=function(a,b){return _.vd(b)};fga=function(a){return a};gg

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	7.85060621536659
Encrypted:	false
SSDEEP:	48:LWycSphBdUirO3aEMudb2oy+v1kxho/aXgB1+Y11Og6tcRS8pEqp/HGWljfm3h6n:LWyNTrAqCCrXgB/11Wp83/vxfIh8VTy+
MD5:	9E9DD969CEB057A228067A1C539127F9
SHA1:	FB2DA26959858054157960BB7F8E6C145648EAAC
SHA-256:	DB209390B90B70F4B1EF3540CB581E4EC8EDBBA21980971B68E4AEF5C5D352FB
SHA-512:	0601582BF01D92EC6CB88B95C6246E3BC48EB2B477F733B1FD9D2614AE26ABDA7D2481B20AC89BB7C7F4BC63486AD713F3729ECD1E8279B0E2EA8025E0BE40C5
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
Preview:	.PNG........IHDR...".........9.$.....IDATx........_..MI.....s2..O...;.9...2..s.en7.9.9.0'..a]nE.....>}.....N.....f~;..{ss.6.cv.z.._dz]r.%...!j.n...1........!j.n...D..P..O.$R&P..=..".(`.Fl.BPS}<K......P.j..g....4....S...l...G./.7X..".6.$....Hb....h.JB&..M<"....I(PrI..0..db)..V... .K9h"..s#(....E..A.F%v.....&..r....Z....!b.....0.H.4...L&.$"d.."B&.?}{.^..Yq..M,.. ..ynb.H...Co.x.x.%.......-.M.%.\|d..C....y$b...D....<....."............}"...X.#.Si.q.\.:...J........qNV!.!!..9c..BfOp#0...!.e..72.K....y.$...V"$.$IP..D.q.."....Y.".....9...8....".H/...+..-..d.O..xa8F...?}k....2...=..$4.M.H..J.!.d..9.....,.%..+)b@..@.P..%...........)...b.B..(.H..D.r..j.1 g"...5:I...R....$Q....i..2..&..D..s?r.W.~..[.l...\|.3..-y.I..R.H......."..h.!Q...YDRP..N(P....M..2".E...s.:.;....0.+...H..r.6G4PLF...sd..b`.F..u>..#.I(.2 ."...Ns.".o..e.....R...@...I,d.....H....b.K...D.0i.dB.1..`9~.W...k0.......V.....L.d..s.Ff....u....^s........(....x.........q.j.7.`...n.>.\\|.V ..=.....#P

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	184562
Entropy (8bit):	5.629007297098108
Encrypted:	false
SSDEEP:	3072:B57rVrIIJLjJkPCmgev/fZ64PATDEBBaNCuclzoS/XBCy4y7kh6GUCWB1R20rNTa:B57rVrIIJLjJkeevnZ64PA/uaNCuclc1
MD5:	BB161E955A3C970CDD870A4EC0BD6D7F
SHA1:	125E1DA1CD7BF3BBFEB22D24D8D8CCF70800D71A
SHA-256:	FB4171324646676906D68D37FC0E678AAF5655E0A910D565CBCA48771B727506
SHA-512:	B4052D4A5CE7CF80F9C5EE4E3960F7B18F0F4E2B347B4D740E0B03F52362488E60A4853498377CFD4E86E53FE6992B9F067F79EAFAC0435D7CD212637FEB861A
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jwa,iwa,lwa,nwa,owa,pwa,qwa,swa,cE,eE,fE,uwa,jE,wwa,kE,ywa,lE,Awa,zwa,Bwa,Cwa,Dwa,Ewa,Fwa,Gwa,Hwa,Iwa,Jwa,Kwa,Lwa,Mwa,Nwa,Owa,Pwa,Qwa,Rwa,Swa,Twa,pE,Wwa,rE,Xwa,Ywa,Zwa,$wa,axa,bxa,cxa,dxa,exa,fxa,gxa,ixa,kxa,mxa,oxa,qxa,sxa,uxa,wxa,yxa,Axa,Bxa,Cxa,Dxa,Exa,Fxa,Gxa,Hxa,sE,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Pxa,uE,vE,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,wE,aya,xE,bya,cya,dya,eya,fya,gya,hya,yE,iya,zE,jya,kya,lya,mya,nya,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,zya,Aya,Bya,Dya,Eya,Fya,Hya,BE,Iya,Jya,.Kya,Lya,Mya,Nya,Oya,Qya,Rya,Sya,Wya,Xya,Zya,bza,cza,dza,eza,YE,ZE,$E,aF,cF,iza,dF,jza,eF,fF,gF,hF,iF,kza,lza,mza,oza,pza,jF,qza,nza,tza,uza,nF,yza,Cza,Dza,Eza,Fza,rF,Gza,Iza,Jza,Kza,Lza,uF,Nza,Tza,BF,Wza,Vza,CF,IF,Yza,Zza,$za,bAa,cAa,cG,eAa,dG,fAa,gAa,hAa,iAa,fG,kAa,jAa,lAa,nAa,pAa,rAa,vAa,tAa,wAa,uAa,gG,hG,zAa,AAa,iG,jG,BAa,DAa,lG,mG,CAa,FAa,oG,pG,GAa,qG,HAa,sG,tG,IAa,uG,vG,JAa,wG,P

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 134, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7555
Entropy (8bit):	7.605906902860355
Encrypted:	false
SSDEEP:	192:7MN3be/TkG+90TNgSyo88QzWLQqU6h9xMxvq0:7vLkG+6JgSy7CcqPvCxvt
MD5:	6D7F793473D4F975D8C4CB56FA49ED31
SHA1:	867CBEFE1922AF84F5D97CF95E5146F25F229A25
SHA-256:	34A550F9831220F23A600D3B408139E52990D07CDF6A57ED3FDBC5030A32D1FF
SHA-512:	85A2A0BDFC78B3D121BD04032F072C37A81F6AC76683D26E00371047A6416E5064172AF36F589D8C7A6EE794A608FD3D8827A96698D063849C052AF981B90B37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........PLTE..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Ha....tRNS.=7....U>.....s[.-..x..I3.?j...........\|O.....R..o,...K...v...."(.q'.u................L.AX. ..d]MC..4r....e.V&..*..a..........E..9..^.:S.2......$J.Nc....

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31984)
Category:	dropped
Size (bytes):	255145
Entropy (8bit):	5.332166109638304
Encrypted:	false
SSDEEP:	3072:RzSHGGLY2736JRbIqf2kBj9tQqxokKo9FMbxu5/2I1u:RzSHGRRbI+2kBj9tlokKo9FQN
MD5:	B38E14DF288CF76D4A8D2BDEE11A2038
SHA1:	207925C06F4ACD4D61D7E44A9C3BD085A2C16EDC
SHA-256:	FE7F7A5DC1FB43AA9A22F4B5B1198370B13DADDCAFA0C9BEF3E45D7F16372A31
SHA-512:	4C569004AA97552990D09699AB4D05E822080868B842BDD0C875FBD1F41B37DF23E484C40ABBAA9C81E2441BCD166661AE7AE9C0891BF747FA702D4088939F49
Malicious:	false
Reputation:	low
Preview:	!function(){window.WootricSurvey=window.WootricSurvey\|\|function(){function o(o,t,e){if(4!==t.length)throw new d.exception.invalid("invalid aes block size");var r=o.b[e],i=t[0]^r[0],n=t[e?3:1]^r[1],c=t[2]^r[2];t=t[e?1:3]^r[3];var a,l,s,u,m=r.length/4-2,p=4,f=[0,0,0,0];o=(a=o.s[e])[0];var w=a[1],h=a[2],g=a[3],b=a[4];for(u=0;u<m;u++)a=o[i>>>24]^w[n>>16&255]^h[c>>8&255]^g[255&t]^r[p],l=o[n>>>24]^w[c>>16&255]^h[t>>8&255]^g[255&i]^r[p+1],s=o[c>>>24]^w[t>>16&255]^h[i>>8&255]^g[255&n]^r[p+2],t=o[t>>>24]^w[i>>16&255]^h[n>>8&255]^g[255&c]^r[p+3],p+=4,i=a,n=l,c=s;for(u=0;u<4;u++)f[e?3&-u:u]=b[i>>>24]<<24^b[n>>16&255]<<16^b[c>>8&255]<<8^b[255&t]^r[p++],a=i,i=n,n=c,c=t,t=a;return f}function t(o,t){var e,r,i,n=t.slice(0),c=o.F,a=o.b,l=c[0],s=c[1],d=c[2],u=c[3],m=c[4],p=c[5],f=c[6],w=c[7];for(e=0;e<64;e++)r=(r=e<16?n[e]:(r=n[e+1&15],i=n[e+14&15],n[15&e]=(r>>>7^r>>>18^r>>>3^r<<25^r<<14)+(i>>>17^i>>>19^i>>>10^i<<15^i<<13)+n[15&e]+n[e+9&15]\|0))+w+(m>>>6^m>>>11^m>>>25^m<<26^m<<21^m<<7)+(f^m&(p^f))+a[e],w

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	300718
Entropy (8bit):	5.568652386357979
Encrypted:	false
SSDEEP:	6144:RzG84384txcDnISDPLj0h6bmtFkU7KlXiaR:RzgsexcAJ4BR
MD5:	064FF5259B2F68131CB751324EFC75CB
SHA1:	33189DF2AD42A54D70250067C77F897F8735E82C
SHA-256:	ABDE196D24E2FDF9FAEB2FD9D665720A0B7D5742A89EF3EC84E6BA7A506148F9
SHA-512:	816D776F5EF821D8D5D80AA9233883840F8596044332AABE706FD65648A31A633365FFF71F02759A115C7566BC7F1A6D89E8B37F975FBB916E50E6B18EEB87E4
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	105
Entropy (8bit):	5.059896975735506
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQXxQGXW6kYBNNERfQVkh:UcHdXbXeUAhQmXsRfGq
MD5:	C2844CEB1532CDBB02DD282C0811278B
SHA1:	CD0BA8A086710F644800C3FA794B823584B51AB8
SHA-256:	A3D4054CA2BED4FF6FA8C8665A3538217BEF3A2576734FA00C7585E4923C5530
SHA-512:	7341AAD1AA9DE2C1392C4C69A92DD46F6D7E5DBDB6058547D24D36FCE3A347D12A4272C0ACBAC89CC5335A4E8D08A72B3E9567EF0359FEA89B02D638999D3936
Malicious:	false
Reputation:	low
Preview:	/**/jQuery3710923492156920481_1729723842522({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4790)
Category:	dropped
Size (bytes):	47932
Entropy (8bit):	5.537220353892626
Encrypted:	false
SSDEEP:	768:HHjSdlborb3JFLm97ZM+WytEvJbW5jOu/R0fsl8X28jOu/1tN6qvsM/VsN0JWMYA:BOubScA8W+W+XfWgirVKttO6Hv1
MD5:	4E6E42CB0EB1174A39D830346BDB7EC2
SHA1:	119ABC666507C202BE6E2E3B1B952F4EE35C06D5
SHA-256:	3DF66B5168FAA329B23A610D6F8933CD12DB195D2D3C00639ED42D59FEFC4587
SHA-512:	9D6C78711218B9D3CB71E4E9EBB0E6CB755B3C23F02E5DC60A59517B740E8828B3956C283BFC8CF7A05622D758B783A9C049666717FCDDA852B7296F0C5ED0E8
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('places_impl', function(_){var mrb=function(a){try{return new URL(a,window.document.baseURI)}catch(b){return new URL("about:invalid")}},nrb=function(a,b){const c=b.createRange();c.selectNode(b.body);a=_.Ye(a);return c.createContextualFragment(_.We(a))},orb=function(a){a=a.nodeName;return typeof a==="string"?a:"FORM"},prb=function(a){a=a.nodeType;return a===1\|\|typeof a!=="number"},o9=function(a,b,c){a.setAttribute(b,c)},qrb=function(a){return a.Du.map(b=>{const c=b.Zg;return`${b.url}${c?` ${c}`:""}`}).join(" , ")},srb=function(a,.b,c){const d=orb(b);c=c.createElement(d);b=b.attributes;for(const {name:h,value:k}of b){var e=a.Fg;var f=e.Eg.get(d);e=f?.has(h)?f.get(h):e.Gg.has(h)?{Ik:1}:(e=e.Ig.get(h))?e:{Ik:0};a:{if(f=e.conditions)for(const [m,p]of f){f=p;var g=b.getNamedItem(m)?.value;if(g&&!f.has(g)){f=!1;break a}}f=!0}if(f)switch(e.Ik){case 1:o9(c,h,k);break;case 2:a:if(e=void 0,_.Jda){try{e=new URL(k)}catch(m){e="https:";break a}e=e.protocol}else b:{e=document.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33948
Entropy (8bit):	4.883713307550517
Encrypted:	false
SSDEEP:	768:E68TiPDemfFpe+AnVzfx3wybWwRIf6C2ewxrcABrAavJ2kXBFhnPGssAOspJfsn9:E68TiPDemfFpe+AnVz1bWwRIf6C2ewx6
MD5:	6CA665841E133E2660080727B38FA55E
SHA1:	CD5A5E0B0E82297621E922A18B83AC833A8983E8
SHA-256:	DE9843B43586D4CBAF0501337110A82AF340F231289B9FF17A46966C98842E6C
SHA-512:	3987DAD760FCDD05E53B059916AB667A612D5A1A3CC6117289199AED0202AF4F77EEA6843D27F535B5BB4B24533277AE7AE23D857A23E62F5C7C26B7D23A5F54
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/branding/bypass/google/1234567/google_bypass.js?send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842528
Preview:	//Saved - 1800 lines on : svc16-pr : 2024-01-16 19:39:11 -0800.var google_bypass = [.. {.. geospatial: true,.. lat: 47.5984551,.. lon: -122.14608240000001,.. name: "Lake Hills, Bellevue, WA",.. type: "Solutions",.. zoom: -1,.. bounds: {.. northeast: {.. lat: 47.63305727084875,.. lon: -122.05902451079584.. },.. southwest: {.. lat: 47.569858627681846,.. lon: -122.20133179228998.. }.. }.. },.. {.. name: "OR",.. lat: 44.0521,.. lon: -123.0868,.. type: "State",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Fayetteville-Springdale-Rogers, AR-MO",.. lat: 36.262501,.. lon: -94.467407,.. type: "County",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Old Town, Lake Oswego, OR",.. lat: 45.41211699999999,.. lon: -122.6623342,.. type: "Neighborhood",.. geospatial: true,.. zoom: -1.. },.. {.. name: "Forest Highlands, Lake Oswego, OR",.. lat: 45.430238,..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65499), with no line terminators
Category:	dropped
Size (bytes):	153025
Entropy (8bit):	5.508519064494698
Encrypted:	false
SSDEEP:	1536:nvenciugOWhYYWRaXJjQbjkvIugkLyO72OfCll/5himk12S3HUjZn4eFiBVfqfLT:nvcZ2OfCll/5hihU2UT
MD5:	D98FDA6FC7F9129738D9FD992F96685D
SHA1:	D2684EC92E37F37F0BD218E879E40408B28096B6
SHA-256:	8CB0EBC7DA7BFD438AF532EB27A693232E3F47AE45F214D8B4E3ACC1D043A5F9
SHA-512:	8BA4AFD116DD0484226EA9BF74824D0351F246EDC3814B4A10DCFE0E650CED36D00F9F9391130FD06AD5C40CBDE2455A3E40190A8F9A407491FE8D0938730AAA
Malicious:	false
Reputation:	low
Preview:	/**/jQuery3710923492156920481_1729723842520({"status":"success","data":{"result_type":"Hash","result_list":[{"fonts":[{"name":"font_1","color":"#ffffff"},{"name":"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"secondary_body_font","color":"#333333"},{"name":"primary_background_font","color":"#ffffff"},{"name":"secondary_background_font","color":"#bbbbbb"},{"name":"highlight_contrast_font","color":"#ffffff"},{"name":"button_font","color":"#ffffff"}],"colors":[{"name":"primary_background_color","color":"#0f2b52"},{"name":"secondary_background_color","color":"#bbbbbb"},{"name":"tertiary_background_color","color":"#0f2b52"},{"name":"button_background_color","color":"#0f2b52"},{"name":"highlight_color_1","color":"#0f2b52"},{"name":"highlight_color_2","color":"#bbbbbb"}],"images":[{"url":"https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_blue-116x38.png","name":"LOGO_FOOTER_DARK"},{"url":"https://svc.moxiworks.com/service/v1/

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	downloaded
Size (bytes):	241331
Entropy (8bit):	5.562689576677095
Encrypted:	false
SSDEEP:	3072:idVJEEXg18UXt1510ZIUCM7/6fSnJJVh6HGJj0h6blszuPbRum1dls:M813Xt1WXhUGJj0h6bMkbRhls
MD5:	1D0049B4DA1AE4C14D323FC7D10CDCBD
SHA1:	92016CFCCD62634CC5BB961950D53BB1E820FCE2
SHA-256:	1A80886B890F303EFDB15A9B0FA8BE3FA40F49B74C9D820B1E57F8E27EDD9600
SHA-512:	84100F3B4BF2AEA6A13780FCAE9FEE880991FEB99CE03BF2E455966ADACC6FD6B9799A56212A52FBE7DC5C50EE41CD4D6A67F8D32847F3EC1B7A3B9D39DF2CEE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TLSCP7N
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"agentMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"brand"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"companyMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"companyName"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"country"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"officeMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"officeName"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"role"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"oktaID"},{"f

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	105
Entropy (8bit):	5.080141709250485
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQUdGWbW6kYBNNERfQVkh:UcHdXbXeUAUdlXsRfGq
MD5:	1B7519D802CBEDB0D2B150E890688BD2
SHA1:	E48B57C136F29C4837AF2533973846E976D5ACCB
SHA-256:	C261900468D379BB1F08B859CA7150D5B04711B0E14DF1E409C86725ECC50FA7
SHA-512:	18364B46792852322BE61E4FED4628B2D39459A5C219FFC6D21B708300B79EA8464E983AF5CBEE3C28E2F0668D46AFC25115ABDC15260198F1952A838E0930D5
Malicious:	false
Reputation:	low
Preview:	/**/jQuery3710923492156920481_1729723842518({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	dropped
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	dropped
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, Vitruvius-icon-set
Category:	downloaded
Size (bytes):	17440
Entropy (8bit):	6.457607039832829
Encrypted:	false
SSDEEP:	384:iIUqrk5hd9Cn//5vmyrRw3RZMs8Fduf6jMzf5U:irCk55C//Zmew3RZouf6AzfO
MD5:	C61DC1FAD5B0CED8A60FF99758DFE523
SHA1:	A9E1EADE1771165D2B759760A68D7940F6359658
SHA-256:	6CEA0CF25353BF8155B1F7A539B9F7D7B7BBD8C359E7F1F90996AE6437B5DC67
SHA-512:	412133513FA9C43162E476C91612750DDC5DAD7A8451F0BAD61737F6C2D7F44D2EDDE8A8941FC41054EF8C4506B33A9F64A0AD87267C6851FF690C830A7B9C18
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/@moxiworks/project-vitruvius@0.0.21/build/fonts/Vitruvius-icon-set.ttf?xu4n51
Preview:	...........0OS/2...o.......`cmap.V.........Tgasp.......p....glyf.(8d...x..>.head.Fi...?....6hhea......?....$hmtx:./...?....Dloca[.j...A0....maxp.h....A.... name.y.?..A.....post......D.... ...........................3...................................@...L.....@...@............... .................................8............. .L......... ................................................79..................79..................79.......T.....l...(.D...3.#.#5#5353.."'..'&547>.7632............'27>.7654'..'&#".............#..E..E#XNNt""""tNNXYNNt"!!"tNNYNEEf....fEENNDEf....fED..E..E...2""sNNXYNNs""""sNNYXNNs""4..fDEMNEDf....fDENMEDf.......X.....i...8.<.A...2............#"'..'&547>.763."............327>.7654'..'&..3..53.#..XNMs"!!"sMNXXMMt!!!!tMMXMDDe....eDDMNDDe....eDDyVWVV.i"!sNMXXMNs!""!sNMXXMNs!"3..eEDMMDDf....fDDMMDEe...\.'...{{.......1.s.....2....#"&5463...........s............h.....E.3.U.c.....................3..#!"&7267>.7>.547>.767>.7>.32............!..'..54&'../.*.1"01.....3..#"&5

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	105
Entropy (8bit):	5.059896975735506
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQXxQGXW6kYBNNERfQVkh:UcHdXbXeUAhQmXsRfGq
MD5:	C2844CEB1532CDBB02DD282C0811278B
SHA1:	CD0BA8A086710F644800C3FA794B823584B51AB8
SHA-256:	A3D4054CA2BED4FF6FA8C8665A3538217BEF3A2576734FA00C7585E4923C5530
SHA-512:	7341AAD1AA9DE2C1392C4C69A92DD46F6D7E5DBDB6058547D24D36FCE3A347D12A4272C0ACBAC89CC5335A4E8D08A72B3E9567EF0359FEA89B02D638999D3936
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842522&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842523
Preview:	/**/jQuery3710923492156920481_1729723842522({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	dropped
Size (bytes):	241325
Entropy (8bit):	5.562656338536951
Encrypted:	false
SSDEEP:	3072:idVJEEXg18UXt7510ZIUCM7/6fSnJJVh6HGJj0h6blszuPbRum1dQs:M813Xt7WXhUGJj0h6bMkbRhQs
MD5:	46B8A8A4D520911F39745285D7EDEA18
SHA1:	FEAB950342F057EB74FD1F94BD35AA4D2313874C
SHA-256:	41C26C2D953FE3D2C60D7FCC8E756EBBE69A08D42A0325A9A737DB8B896B4C9F
SHA-512:	1035E14D70FDF4C3BCBF85F62F51A9D097FCC043C1B6F1A0A5B6671D6734C95405CF7D1E77235BFD4813D03389D24645739A7D5FF86B00FCB1E17822FF33E086
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"agentMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"brand"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"companyMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"companyName"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"country"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"officeMDMID"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"officeName"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"role"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"oktaID"},{"f

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398)
Category:	dropped
Size (bytes):	399
Entropy (8bit):	5.089290919704416
Encrypted:	false
SSDEEP:	12:RXfAS2SGD+5ArA/BmPE7zI/XwpHlpga86V+xaNmo:R723rAZmchHDgLgNT
MD5:	AC1B994013FB81A1E86A71440AFB73A6
SHA1:	10F978CB8532C22D61B8BE8F8BAA28A13617B90B
SHA-256:	9CE4F383B5EE9BC4D64C836585C7229F087076E2661A42CF992A720786E707B3
SHA-512:	5D15B600C7D3AC85F45E1D93B2A0E072618D8C3F9A63D59F05A0ABF9C2614EEA32ED7094A596F8D3C6183418D6830B56A741B80758FE1A80BF234489A1344E33
Malicious:	false
Reputation:	low
Preview:	jQuery3710923492156920481_1729723842526({"is_in_european_union":false,"longitude":-96.8834,"city":"Dallas","timezone":"America\/Chicago","asn":8100,"offset":-18000,"region":"Texas","latitude":32.8167,"organization":"QuadraNet Enterprises LLC","country_code":"US","ip":"173.254.250.90","country_code3":"USA","postal_code":"75247","continent_code":"NA","country":"United States","region_code":"TX"});.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6713
Entropy (8bit):	5.399676175832158
Encrypted:	false
SSDEEP:	192:pN55N+NRNY3qNkNCXNlNOQNNNiNk3XNPN4qNYaNU1NHNUN13eN/NDTNl:v5fUH2QieLOeD4CdFRlU7tyF0VVl
MD5:	D116B73DFF2C9F62F993ADC80FE34649
SHA1:	BD4FA49EDF892A9E4EF7EB54E9991AE6763BBB26
SHA-256:	FE53B72DE605EAEAA413BD918760961DDF0D8557891CA23E74B3AD6785B733CC
SHA-512:	B735D9083814693EA91ACBAAF1DB2286779D72DA2F3E9E24CF943CD5F6E12785D7DE0D1BFEBC0528E73BD3244B88AA1C9B6841B26CF6B692CBDADA33D665C7E3
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4930
Entropy (8bit):	7.951522611073012
Encrypted:	false
SSDEEP:	96:ob83AlAuA3gJ6jZiSWc+F8ShQgLtC184U79HCEwPV1XQzXKV4kF+rjkF:oYAqX3g+ZiBJF8SKUCqBHRw3XEX84kwO
MD5:	C4074FA39F6F684C4DAE4D19E8C0F75C
SHA1:	C692E09102E8DADD7A649BD0F2F67F775C2CA12F
SHA-256:	91D41571AC0752295F9B77D474CFAE21B2044543CA082875B17E9CA4F504AB49
SHA-512:	05013FC1E54B14A5838697F7B9412746C2323442E04679254D611B0D55835931FDA8D4C6634FA12EE677D692A055EA48E0C3D6B0760081CB36034D413F47D866
Malicious:	false
Reputation:	low
URL:	https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJnvoiPEPddrP4Gced7dSNKYtMbP.jpg?width=500
Preview:	RIFF:...WEBPVP8L-.../.A!..'.L./.B.....$t..=l..?....c4.1...PG.+.]/.&...Y.#'..`K(.J.Aw..;F.Q...\|.....n.x..E.....WM...i....5..5Y..[@...!...o{.$;.m.e>.......}.........R.z..?/\.-.w...3..h.D.g.9..W.[..N...o?...N...................~4\|..{J.........r..'$../.<k._...?.v../...o.......)..'..1........O..........1...]3...%......\|........P.[.../9.......37?....1..6.F.1...]..%G..[m.K>p.Y.S.........e.2.v.....b.K.9B..N.1.G...W...'..%.Q...h.....p.z.......R~....{Z.R.../...q.....K.@...r...X.l...~D.Z.x.......m^..C....>...ML^..&.......:-..e0.`.!...C.....=.$l....4..k.S.w.J.xx.II..N..?...^....>CA...7.4Z...St...4].g.R...#X.....'Z...s....[.m.z..z.../.X!.$..D.d..c.Y..@ h/:*.......qP........@t..@t.9.+.6..@L@.....F.@ .U$..`@.......<7D...R.....D......M#y9.KO.....+......3.67.......".]} .x`.._B.9$......g.e.I.....).[. ,>..@....C.D.....V..s...=......f....R.....).+...>t..P8.>.$.x.PX...D......l...R..R:........v.6..\|...J..i<....h......%$q.....f.O.......A^....n..D#I23...(

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x187, components 3
Category:	downloaded
Size (bytes):	22092
Entropy (8bit):	7.960339393756679
Encrypted:	false
SSDEEP:	384:S47KrCsO28Ma9HMy2+Zn6hhyljxQxDSoNVo27woYKlDR+kVMMpmu+/vIlC:S47V28Ma9HMyvKhyYlSEwoBQkVMMX+Yc
MD5:	1A6785B2A53C3027E44B9E0199F12090
SHA1:	B425EF9BD8103DD3A7857366ED0C14B460BCF9ED
SHA-256:	59669880AD8FD6A7859531CD2883AE5B36A04F3A8B0E665E24F2F44F4BDBDFFB
SHA-512:	264BC66990DC645C1A812BC9AB2ADAF302914A1ACC9FB06970E5BFC315F50EE668C7EE98419DFAA6B846255BF4E7149BCC5BFA3D0C2B4B7DB771BA92F5BD154C
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/mx_pages/neighborhood-news/images/NN_couple_crop-1200x187.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................D........................!.1A.."Qq23a...#.....4BR..$b.r...CS..%6s................................../.......................!1.."AQ.2Baq...#.................?..s....f.S2..>.WVl.I.3k.6...RE.!.s.rL(.]U.&...6..g.....p.....T.\|..:t.....R..6n.A.V.Y.y...N2..$.;dd........9.G$K..j.Wy.qX....LT.Nz..3...D..R.(.2//.........Y...n...K6.Z......N.....38vKTt.$m:.A.9..T..v<,.D...f..AD..(..0.z.I.s.......28.2T.h.^..f...M.5...A-..S..AKr.(&9......0.t.:..J..R..m...6...-....d..k..%.8..I7.I...9%&.t.X.....HxWy.}\...$4...p......!....t.........Q.%...+.B5,.....Paf=.$..R..e...L.%...s..c..y.q....Me.....=~^S.8....=Pt.....O..5\.2..no.s...i..,}..\L.R..M...`0.....w...M@...M.........~.7...Y..G9*.du....p.A%..-.&c.d.ML......k.b.w.I.c.$...F`.K....3...jT..1@v.w.V]...A..w.4i.........Y....N

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57102)
Category:	downloaded
Size (bytes):	385887
Entropy (8bit):	5.273856775964871
Encrypted:	false
SSDEEP:	6144:ak2u5SOV+UQ3Zo/0kPlQstW6nvsEnequ5V:ak2u5SOV+UQ3Zo/0kPllt7kEQV
MD5:	85030FCD985B6FFC3BE5FB08E383153B
SHA1:	60172B3C74F139F60FD448BED0714D4E42F780D3
SHA-256:	E8E24F72F6AEC0370C229A7E9D20C07C28729120427C8545AAFA566C26EC1D7A
SHA-512:	62FA377C7244152D7A187B2CEDE565233B22B4773E5BC0CFB7D1AC6D81C67E1AA847951045922972A9CBCF6F374436FEC08633B2DB24FB83549B48EB908F174F
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-0703f4632eb5b4a19e7b065b249c746d.css?ver=A.3.49.20241022.0.6
Preview:	@import url('//fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:wght@600&display=swap');#TB_overlay{background:#000;opacity:0.7;filter:alpha(opacity=70);position:fixed;top:0;right:0;bottom:0;left:0;z-index:100050}#TB_window{position:fixed;background-color:#fff;z-index:100050;visibility:hidden;text-align:left;top:50%;left:50%;-webkit-box-shadow:0 3px 6px rgba( 0, 0, 0, 0.3 );box-shadow:0 3px 6px rgba( 0, 0, 0, 0.3 )}#TB_window.img#TB_Image{display:block;margin:15px.0 0 15px;border-right:1px solid #ccc;border-bottom:1px solid #ccc;border-top:1px solid #666;border-left:1px solid #666}#TB_caption{height:25px;padding:7px.30px 10px 25px;float:left}#TB_closeWindow{height:25px;padding:11px.25px 10px 0;float:right}#TB_closeWindowButton{position:absolute;left:auto;right:0;width:29px;height:29px;border:0;padding:0;background:none;cursor:pointer;outline:none;-webkit-transition:color .1s ease-in-out, background .1s ease-in-out;transition:color .1s ease-in-out, background .1s ease-in-out}#TB_a

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65462), with no line terminators
Category:	downloaded
Size (bytes):	1038867
Entropy (8bit):	4.916973170795659
Encrypted:	false
SSDEEP:	24576:BqF89FIgR8SVqY5l6ym87qXVMkVCLNoQuMSwMwylBM9nC3t6SUvknQm6kUNz6Hx5:9nzET
MD5:	1E77562AC389AB0E673F4C8DC0AF23B7
SHA1:	B7790C088D0086CD92BB91B8B2C4ADB071336A42
SHA-256:	CEA2D3CCA3F2F08A97186C2F438D3E244BFB6490BD16523F4ACCDBE9739C2CB2
SHA-512:	D948CB3A95AD1873BA2E8FB1C47645E10D95E7673F0F342AE54507150425C122E31E7CEFE23E3FB7B2444CF4EE7A8BA80DF9993E4A2863A8E7D8B673527CECA4
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/profile/mls?callback=jQuery3710923492156920481_1729723842516&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842517
Preview:	/**/jQuery3710923492156920481_1729723842516({"status":"success","data":{"result_geo":null,"result_type":"MlsDTO","wms_svc_common_version":"2.11.11","request_uri":"https://svc.moxiworks.com/service/v1/profile/mls?callback=jQuery3710923492156920481_1729723842516\u0026send_from_agent=true\u0026from_aws=true\u0026from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com\u0026source=agent%20website\u0026source_display_name=Agent%20Website\u0026site_type=Agent%20Website\u0026_=1729723842517","number_found":772,"number_returned":772,"wms_dbcnt_ms":125,"wms_model_version":"5.0.2","wms_db_ms":0,"wms_pkg_ms":0,"result_list":[{"dom_available":true,"days_on_market_label":"Days on Market","name":"ABERDEEN MLS","abbreviation":"ABD","mlsid":723,"mls_agentid":null,"name_display":"ABERDEEN MLS","data_available":true,"extra_disclaimer":"","disclaimer":"Copyright 2024 Aberdeen MLS. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for consumers. persona

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	66550
Entropy (8bit):	5.604051848608442
Encrypted:	false
SSDEEP:	768:CQugoLs+1AK2AEUPCixybccFth66sEiomMD6/t/H+ZLZBmbjLDWA:Nuga+i82//t4A
MD5:	FEC04F0E80C1844F68D1E1413D1D142C
SHA1:	C5E13B890B4D18068718C9D421D9A2277CE043BC
SHA-256:	C97487D578DD5335D7267FF1F1C6B00948A199A58A2EACD1E963F791A2DA720E
SHA-512:	B25D825EF10FC69597AE26C1DAE42C32FEBCBA820BE940536A52D58E46F4308788C076CF42E7F95E8F5C5FA485EB3DEC025C4123CE8FF04CEDAAB35F619FCCB6
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Kib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.dR(a)},Lib=function(a){g.Zo(a);.for(var b=0;b<a.hg.length;b++){var c=a.hg[b],d=a.fz[b];if(d!==c.version)return!0;if(!g.Xo(c)\|\|c.Vm)if(c.Vm\|\|c.v_!==g.bp)(c.P1(c)\|\|Lib(c))&&c.Q1(c),c.Vm=!1,c.v_=g.bp;if(d!==c.version)return!0}return!1},q4=function(a){var b=g.Vo(a);.a={};return a[Symbol.dispose]=function(){g.Vo(b)},a},r4=function(a,b){for(;a.length>b;)a.pop()},Mib=function(a){a=Array(a);.r4(a,0);return a},Nib=function(a,b,c,d){(d[b]\|\|d.__default)(a,b,c)},Oib=function(a,b){this.j=null;.this.B=a;this.key=b;this.text=void 0},Pib=function(a,b,c){b=new Oib(b,c);.return a.__incrementalDOMData=b},s4=function(a,b){if(a.__incrementalDOMData)return a.__incrementalDOMData;.var c=a.nodeType===1?a.localName:a.nodeName,d=a.nodeType===1?a.getAttribute("key"):null;b=Pib(a,c,a.nodeType===1?d\|\|b:nul

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (55795)
Category:	downloaded
Size (bytes):	564724
Entropy (8bit):	5.4065480012642455
Encrypted:	false
SSDEEP:	6144:WsRISpSxY4SIytE8UFdJ0NzW9cWmiMKqxvke9ZIg0O6oV:WsKSpSxY4SIytEpdJ0NhhPgIV
MD5:	6CB71113B81BCBC6B97473F1254D5348
SHA1:	1CD6781FFBCECDBB8D1FDAC0CBFD7999148A1F92
SHA-256:	18A8E5D5CD38077638F84BB2EA9A6CE5298B58F6E31E40E0A57B9BA1870548E9
SHA-512:	0C428E275C95544DE311B54C92781AC20D3226FECB2109CE315D963B646CEF2A028FD99F458249D3E8B54FB440E8C00896FDF67F9C7334173DA78506FEB0BFD0
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-thickbox-c9f1ac4d10271921b65df940585b53c7.js?ver=A.3.49.20241022.0.6
Preview:	if(typeof tb_pathToImage!='string'){var tb_pathToImage=thickboxL10n.loadingAnimation;}./!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/.jQuery(document).ready(function(){tb_init('a.thickbox, area.thickbox, input.thickbox');imgLoader=new Image();imgLoader.src=tb_pathToImage;});function tb_init(domChunk){jQuery('body').on('click',domChunk,tb_click).on('thickbox:iframe:loaded',function(){jQuery('#TB_window').removeClass('thickbox-loading');});}.function tb_click(){var t=this.title\|\|this.name\|\|null;var a=this.href\|\|this.alt;var g=this.rel\|\|false;tb_show(t,a,g);this.blur();return false;}.function tb_show(caption,url,imageGroup){var $closeBtn;try{if(typeof document.body.style.maxHeight==="undefined"){jQuery("body","html").css({height:"100%",width:"100%"});jQuery("html").css("overflow","hidden");if(document.getElementById("TB_HideSelect")===null){jQuery("body").append("<iframe id='TB_HideSelect'>"+thickboxL10n.noiframes+"</iframe><div id='TB_overlay'></div><

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.753701696057347
Encrypted:	false
SSDEEP:	3:OAeSfwAQkocTIkoRzIiCnH2fQDthGRY:O1SYAQncTZyqnWfQG+
MD5:	CE894F5634E396C7502438CE6BEFF1D1
SHA1:	BED84D6B732DD6E31A4DD8DF5417DDBBF9D90F2C
SHA-256:	D3C11E5CC932046E2B0B22DDC83FB9B702520B039D27820E97F7ECDC0BB8AF1A
SHA-512:	B59E1A969ADE2C3837250E6C69EB4FE61794D50E8F9AF41C21F3F8A94B20C81EF4FAE0D6FCAD72E135E558859F612560D64EA6B934D5B7B5855B8F87C6ED57A3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSJQlJSCyrjfPyhhIFDfnkCgISBQ2ZbUekEgUN3AgN3RIFDQIjvOYSFwn7UEERRy1lsxIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	CiQKBw355AoCGgAKBw2ZbUekGgAKBw3cCA3dGgAKBw0CI7zmGgAKEgoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 1920x2560, components 3
Category:	downloaded
Size (bytes):	629609
Entropy (8bit):	7.96477042439009
Encrypted:	false
SSDEEP:	12288:AYsNK6xPrYQrbgruWguuaVpF3LeA8kvOvtVkdYi/G5bgSmiPFctKTmGxrmTKOx:uNKmNrobOaVz6Abst+Yi/0bvm7wTmGFA
MD5:	A07C5C78CDCFC9E10312A54FA67808C2
SHA1:	013AB1C130B7E19B285ED551FAC34CEF3C08A14B
SHA-256:	1869EFA76F44A321BC6807C301E0D9EED5BBF56282BF8F09ED2FCB99FD8EF92E
SHA-512:	06A2DCA055F800CBBC89636B12A75E4715A201AA085DA878ED0CF54485572DD9D4F6DCE7720A8BEC0FE993D6C23C8DD2C07532809B60AD2C43A0D4E8EFDB6523
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/files/2024/06/Krista-Little-scaled.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........\|b>.....O.OJ.c9...=.X...a.8..q..rGL.-....d}.JfH.........#.j..&.l...u.D1...K...OE..9....r./J.r{Sq.O....s...q.&[.D.....`.bM...hj.c......nk.U..?.Zj.N.i.J..S..wZ.i.OZm(8....)A.../OJ..h&..z...R.@....A.R..@...(.=i.M.P...r..zSs.9M.H..9I... >..2.sO.a..*E.P@.....rq........Es.....S..)$..#.M4...

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	downloaded
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-includes/js/thickbox/loadingAnimation.gif
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	dropped
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18492, version 1.0
Category:	downloaded
Size (bytes):	18492
Entropy (8bit):	7.988005025098439
Encrypted:	false
SSDEEP:	384:jHq3alnVfBJBuMlPGCh9NBRLS64LRb0v5waXf0BFY0/rJ8Zw4bzUQb:jHqKf5JMOPdzNPLS64laxsFY0t8XcM
MD5:	7FDA4C62C1BDEAE7A08E6FD438104BAC
SHA1:	B1F626E78F5F6D7BE993303A49EB81F0FA4CE57C
SHA-256:	4DBD328E347E890A801D51F9A5F8D38A3EFD51EC34C0AA22CC83D0A95D6D9D71
SHA-512:	C4A36A3C1FF23023533DFF103A108844B7CFE4E793ABA0B1B5576431E77DD6E9EDF29FAD68132577AD6AD55CA7A011A38723DA2FA15D9071D2C6BA4E02D1DADC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......H<..........G..............................Z..\|.`..J.X..<.....P..N..Z...x.6.$..0. ..\|. ..:...%l.F.......T.mZ..V.n!.53.l.@..N....CD.!f......I.(;..Cw.2L..@....M....(.H].......1..I&..tE.e....D...}y..6D.h.Z..$y.J.X._....J2 .(.....=M..+Hd.Y.6.f.J.z..:.........#.#...3..;.<..q./.,g.tK.Y.Ne.?......1.b.......S.".~..\|Q.9.1Q.Y.^....MkF......;v..g(.(S...Z.>...l.XW.Z....-Q.h..MR8$..W(..Wh.0....X..;]3...:..\/..L...L.U...6".h?K.....A.....(2z.uRTn...GaJ......+..4..d...I.[!..Ua..x..4.,@..t....3.e..J._'..R.j.p.t...`.4.......aI,.....W..9V..K..c..... g...:.........'..6.O.0+..;Q..&..e..=..sg......Eg.2.R.M..{{w.{{'4.L.O2.L$) ;..`....PeW..O..iS..e..S.l... .....R.R.+.!.uLUE~...C.JN..J.r...@..g..:.\..;..s.n.s........sq4... ;..N.`.H<T.....p.#2.e....H..T...........1....^......L.....R...R.1.!............E..m_Z~....z..L..j....".q~..Pg!X}1.q.!.n......@.d...._5=..x.......[.y.#$Q.d.........j...1n.....&...-(N..P\5<.f.qB..\|.i...q<.'..C.A...\.i.x.9........1.>....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3808), with no line terminators
Category:	downloaded
Size (bytes):	3808
Entropy (8bit):	4.7348854224777455
Encrypted:	false
SSDEEP:	48:s25+yUW5fRfGD2KEv9AKLYzQfQAx04DfxuuQm0oAyHICN01d5G4g1orQErnVY6Fp:3UW50Y4iCJ/L+EBahUA39E
MD5:	F65D375988B8DB5676C645C8334F8866
SHA1:	5037666378908358EC6118E306BA63C0CB6DF215
SHA-256:	EA9B430678365F31EBE9D2E17F841A1B9D1EBA39765029B437A868F8D97B1080
SHA-512:	9665757CD5BCC5B63A1F91F6B4050CF281D041D87D730C3AF49018CE31B28B692815E2A686D5C07593CDC50283A1DC0E52CC8266A7F44306D3CA01A1C3C2709E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/@moxiworks/project-vitruvius@0.0.21/build/project-vitruvius-icons.min.css
Preview:	@font-face{font-family:Vitruvius-icon-set;src:url(fonts/Vitruvius-icon-set.eot?xu4n51);src:url(fonts/Vitruvius-icon-set.eot?xu4n51#iefix) format('embedded-opentype'),url(fonts/Vitruvius-icon-set.ttf?xu4n51) format('truetype'),url(fonts/Vitruvius-icon-set.woff?xu4n51) format('woff'),url(fonts/Vitruvius-icon-set.svg?xu4n51#Vitruvius-icon-set) format('svg');font-weight:400;font-style:normal}[class*=" v-icon-"],[class^=v-icon-]{font-family:Vitruvius-icon-set!important;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.v-icon-caret-down:before{content:"\e93a"}.v-icon-caret-left:before{content:"\e946"}.v-icon-caret-right:before{content:"\e947"}.v-icon-caret-up:before{content:"\e948"}.v-icon-sort-table-header:before{content:"\e949"}.v-icon-sort:before{content:"\e905"}.v-icon-down-arrow:before{content:"\e90d"}.v-icon-down-chevron:before{content:"\e90e"}.v-icon-left-arrow:before

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53809)
Category:	dropped
Size (bytes):	55108
Entropy (8bit):	5.755438656237703
Encrypted:	false
SSDEEP:	1536:jsb1Yv0Bw0j4yJfXWmq6NP0AS83YrVa3v4hJrqDmnP:WY10EyJf3kMY5wuJmDmnP
MD5:	CEB396A867E89A0762DA369994CD94FF
SHA1:	30181415A732A1372BB12F303533C52C8FBCF83F
SHA-256:	22DE77078397174E303A42D2C2F1B489D3D39529368405F0C45994588BCBC444
SHA-512:	E8F9D0F8712A386D589E0F64FF54219ADEDEE3E69B68BA158A78750A66DDE851C3D8FE07DADBA00B5FDDB19A52C4B7BBE8B6E55E0E348B3F98B8D67B7B0E4558
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Q(H){return H}var E=function(H){return Q.call(this,H)},b=this\|\|self,W=function(H,u,V,z,A,P,I,v,B,Z,r,D){for(D=21,Z=94;;)try{if(D==H)break;else if(D==37)Z=94,D=88;else if(D==V)b.console[A](r.message),D=z;else if(D==u)Z=2,v=B.createPolicy(P,{createHTML:E,createScript:E,createScriptURL:E}),D=z;else if(D==54)D=B&&B.createPolicy?u:79;else if(D==88)D=b.console?V:z;else{if(D==79)return v;if(D==z)return Z=94,v;D==21&&(B=b.trustedTypes,v=I,D=54)}}catch(n){if(Z==94)throw n;Z==2&&(r=n,D=37)}};(0,eval)(function(H,u){return(u=W(18,25,31,16,"error","ad",null))&&H.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	dropped
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	105
Entropy (8bit):	5.070405576190366
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQXKH2W6kYBNNERfQVkh:UcHdXbXeUAaWXsRfGq
MD5:	D66B9DF4FD2A5CDAD8ACAC0B844C361D
SHA1:	455093BAB28EBAB6D71D9A539DC084978F44A300
SHA-256:	12F1F943A973DC69349CA9B7A0A656344B3B812B0F2466A88B9FE9063719F867
SHA-512:	C357D74A47A2D2277782B2B2BB2DA0636A11D92BCAAED57B8E42E9954F11C989421235375C0D80AF14AC70FA7A75CC628E9F9A014057815DD82877324DAE6ACF
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842524&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842525
Preview:	/**/jQuery3710923492156920481_1729723842524({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	24023
Entropy (8bit):	7.889364547042675
Encrypted:	false
SSDEEP:	384:SgoOOkLr/hrpFsnUAX2lEQVh46qRH+9L5tpsO6tL2JeyLuvLkmkRcozE:trAZX2lTVh46v99AO6x2JepvLFBmE
MD5:	34B5539E8164AB5964F1190E1CE560C0
SHA1:	6BA50DEEA72A203291AA259756816152183E0CAF
SHA-256:	F6D7808AB16FA2662F67568CEC5A1CC4A29605E44CB073A13911675437CE8226
SHA-512:	71762B9D4077FEE7F002EBDEB85D2B5E41345750841E551523C04531450DCF618C471FED4867E1EF31244B6731ADB7014B374EBA9501A852C876D939D6C7BCD2
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................. ."' .,... 5),*444..D240"'(2...........&...&&2&2&&&&&2&2&&2-)&&&&&&2&&2&&2&2&&&&222&&&2&&&&&2..........."........................................Z........................!1.AQ.aq."2......BRe.....#Ed..Db........%fr..3cFst....$45CSU..................................+.......................!.1QR.A.a"q..B.#2.............?.................................................................................................................................................................................................................................................................................................................?..v..o.^.:.5...`.!......=\........`. ~l.........t5=\......o`. ......>....'CS...~m.........o`.!z..^.........k.>.?..+.U..\|.ZyN..\(...<...Oa..?6..[{...V.N..\......_a..~m......._)....x......?.3.w..*{..N.\|....`;..m.....A.6.[....V.W..W........?.1..[.....ui.:W....%.yo.......Oa..V.N..\8...<..Oa...y......_'J..@.....

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 238 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11146
Entropy (8bit):	7.969722516316162
Encrypted:	false
SSDEEP:	192:Qamv6QPsly4lpcepktPhGTIMmdVWnvlzp0csi3K2ZFbyxwpnis1TbuBVMmMh9Xfp:Qa86QLscepYP2bvlzuc8GF2U/uZMh9nB
MD5:	D44CCBB36B818DC008C5AB202C4E5E91
SHA1:	8571E99CE2C2DA776A7D1CE0F6CBB44A0D93904F
SHA-256:	7B88B12B4925FCD2F7BBF4E53C11EAA21347F94632D18AC964E7DBB664CF22EE
SHA-512:	9868C4A82781460FB898A35092BCB7A14671CFD67A45C44777D4EDC9B44E76A16CCEBC16FF7CF2C74B16E28A47A7FA75B4FC937F1D42397C7B78303D3F26CBD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<b......gAMA......a.....sRGB........7PLTE..................................................111.................. ......ppq....888.......................:y..............................................................................................]]]...6w.............1t....A~................g................tsp...........YZX@DE.........................................................n........`....}.......J...............V.......774.................................;HP....6..............y\|\|..fii.....~..JTX.\......$5...reV9MZ.RUF.h.....d....pLfp?.....\|..Db.frtet.lt..nS.....tRNS.;.........l .@.c...P.%.z..]ld... .IDATx..[...{z...I.....!`i...."......D..Aa.dD..,.(. @.a.6.m.6.../$v.4q.5.v.....H ..eKv../..f..~.~.}.?..3..........~.\|.......W~..[.E..O..a..~>........R.................M......'_...).._.....t.te .............dk)...ZQ.U.....f.........q.]..%.?...*.3U8..DX.yq.S.p...or.>.>J_..........>.Ib9.-......r

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 1920x2560, components 3
Category:	dropped
Size (bytes):	629609
Entropy (8bit):	7.96477042439009
Encrypted:	false
SSDEEP:	12288:AYsNK6xPrYQrbgruWguuaVpF3LeA8kvOvtVkdYi/G5bgSmiPFctKTmGxrmTKOx:uNKmNrobOaVz6Abst+Yi/0bvm7wTmGFA
MD5:	A07C5C78CDCFC9E10312A54FA67808C2
SHA1:	013AB1C130B7E19B285ED551FAC34CEF3C08A14B
SHA-256:	1869EFA76F44A321BC6807C301E0D9EED5BBF56282BF8F09ED2FCB99FD8EF92E
SHA-512:	06A2DCA055F800CBBC89636B12A75E4715A201AA085DA878ED0CF54485572DD9D4F6DCE7720A8BEC0FE993D6C23C8DD2C07532809B60AD2C43A0D4E8EFDB6523
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........\|b>.....O.OJ.c9...=.X...a.8..q..rGL.-....d}.JfH.........#.j..&.l...u.D1...K...OE..9....r./J.r{Sq.O....s...q.&[.D.....`.bM...hj.c......nk.U..?.Zj.N.i.J..S..wZ.i.OZm(8....)A.../OJ..h&..z...R.@....A.R..@...(.=i.M.P...r..zSs.9M.H..9I... >..2.sO.a..*E.P@.....rq........Es.....S..)$..#.M4...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58981)
Category:	downloaded
Size (bytes):	59016
Entropy (8bit):	6.036924444025019
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq
MD5:	D68D6BF519169D86E155BAD0BED833F8
SHA1:	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC
SHA-256:	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
SHA-512:	FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-includes/css/dashicons.min.css?ver=782b628426a895c0dfd7727f0e7fb402
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	3719
Entropy (8bit):	7.861665767007222
Encrypted:	false
SSDEEP:	96:EHVAXCyxaOyNQtm6xM7O+rqtUZaIQk1t5YR:aAyyxz/VM6sCAQkj5YR
MD5:	1C4EF32A5AFFCC97B1E4E7A20C6B24E6
SHA1:	4A1A555A3B6917003FF0B130AA728B4932BBA315
SHA-256:	6E84993264636ECB43AB0CA1C7A1369213D30ABC408DADDA8AE15DA6524927CC
SHA-512:	C9BB34E34287D563E6ADE775A24D7EC474F7E2A3811F7B596A735112EA746F1020959C3BC55C79009830BD9E73B40D8D61BA4E75AF43AD73D86AD960F9918EB5
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/m55wyDHhgGVpHNcfA1sQuoQQBP03N_unNqm7vZ91CK1sFJhyQ8ErrkdFJShIKjt7vg2j-JT-eQ=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D..........................................F............................!...8Wv."1A.......24Rw..BGQ.#%3Uabq.....................................<...........................!1AQRq..24Sas....."Cbr......3..............?........CFR4uQ!..%.QQ+......T.6..I%.$$..n1Sg../}u*+...3W?l&..................._..~.c.s.G.+.\|I......N...../....s.}h......'.........._.....\......'..O..5;o...GL....1.....+.N..H.H6jv.C...\|...c.s.G..W...>.l....2.\...2..80..;.#.....@.......d.[....-..-....B7m..Rnx\c...RR..(..v........ ..C%..a2.,...r...s .v ...\q.......`<..l4..N@..a.$.......a~...c..O&o..d%1.d/,\D.uijJy\.a..=....Q.l:.Q.....$\]f.M.....CI.q@.'..;.in.$F.........z/.........(...\|e..:7+....z#...5.'S....&mT!.j2.hp.J...][........j!..E...t...Ma%...pDi.C..m..TT...K).....".\|z..H..@.r..E...$...........>...'.6...&...0..,.J..........].3.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.297900837815365
Encrypted:	false
SSDEEP:	24:E1FXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1FXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	70C7EFA4727493003D66E7F221E888E3
SHA1:	1F840C78248552F02BEFD3550E0401111D9AFB34
SHA-256:	D426094C168051F30C71C81F5A51FE910CD31D2CDB2138D71EA0DB1029C1186F
SHA-512:	B269539A0AAD9C5E5DB60691BE76F1BE76C45F74B69B2189D615BF1EABA2C820E37422594514536BB999B448F8375127FDC93B09C79CC36A3798E1FA23A92484
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/a62d836d\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	184562
Entropy (8bit):	5.629007297098108
Encrypted:	false
SSDEEP:	3072:B57rVrIIJLjJkPCmgev/fZ64PATDEBBaNCuclzoS/XBCy4y7kh6GUCWB1R20rNTa:B57rVrIIJLjJkeevnZ64PA/uaNCuclc1
MD5:	BB161E955A3C970CDD870A4EC0BD6D7F
SHA1:	125E1DA1CD7BF3BBFEB22D24D8D8CCF70800D71A
SHA-256:	FB4171324646676906D68D37FC0E678AAF5655E0A910D565CBCA48771B727506
SHA-512:	B4052D4A5CE7CF80F9C5EE4E3960F7B18F0F4E2B347B4D740E0B03F52362488E60A4853498377CFD4E86E53FE6992B9F067F79EAFAC0435D7CD212637FEB861A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var jwa,iwa,lwa,nwa,owa,pwa,qwa,swa,cE,eE,fE,uwa,jE,wwa,kE,ywa,lE,Awa,zwa,Bwa,Cwa,Dwa,Ewa,Fwa,Gwa,Hwa,Iwa,Jwa,Kwa,Lwa,Mwa,Nwa,Owa,Pwa,Qwa,Rwa,Swa,Twa,pE,Wwa,rE,Xwa,Ywa,Zwa,$wa,axa,bxa,cxa,dxa,exa,fxa,gxa,ixa,kxa,mxa,oxa,qxa,sxa,uxa,wxa,yxa,Axa,Bxa,Cxa,Dxa,Exa,Fxa,Gxa,Hxa,sE,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Pxa,uE,vE,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,wE,aya,xE,bya,cya,dya,eya,fya,gya,hya,yE,iya,zE,jya,kya,lya,mya,nya,oya,pya,qya,rya,sya,tya,uya,vya,wya,xya,yya,zya,Aya,Bya,Dya,Eya,Fya,Hya,BE,Iya,Jya,.Kya,Lya,Mya,Nya,Oya,Qya,Rya,Sya,Wya,Xya,Zya,bza,cza,dza,eza,YE,ZE,$E,aF,cF,iza,dF,jza,eF,fF,gF,hF,iF,kza,lza,mza,oza,pza,jF,qza,nza,tza,uza,nF,yza,Cza,Dza,Eza,Fza,rF,Gza,Iza,Jza,Kza,Lza,uF,Nza,Tza,BF,Wza,Vza,CF,IF,Yza,Zza,$za,bAa,cAa,cG,eAa,dG,fAa,gAa,hAa,iAa,fG,kAa,jAa,lAa,nAa,pAa,rAa,vAa,tAa,wAa,uAa,gG,hG,zAa,AAa,iG,jG,BAa,DAa,lG,mG,CAa,FAa,oG,pG,GAa,qG,HAa,sG,tG,IAa,uG,vG,JAa,wG,P

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10639)
Category:	dropped
Size (bytes):	323922
Entropy (8bit):	5.679039793168132
Encrypted:	false
SSDEEP:	6144:enti7PJOuRkFAtpEzi3WOc6jQpGTR0JAzRVuNUYPY641dlmDY6UhBN/Sgq9bNw8p:enti7PJOuRkFAUec6aAzyi6Uh3Sg+bg0
MD5:	6250A6ECFDBEE9DEA139EFDA7AAB121B
SHA1:	AEA22202FEEC929FFEFF59300EF53566CC6957F8
SHA-256:	C74BF204C0097CB8A01E5B0C9971871D6A7F6BFCA98199A4DE3C2FC8538D8236
SHA-512:	10A26EA67321789210071AEE7E9D8C4684BE7C627E51052E1013B035CBF548013E9D37C674009D935E65964B2FC9A938E037C84D064A2AA79CD6439061A460D7
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en\u0026","https://khms1.google.com/kh?v=989\u0026hl=en\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en\u0026","https://khms1.google.com/kh?v=163\u0026hl=en\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixels-pa.googleapis.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.451112686526668
Encrypted:	false
SSDEEP:	768:SAwhvnUKU1hxOWc4saHT2R8omfiaGaiNXuk9xuvNRX9Tcmaj:khMKUW4saXomfN9NTIj
MD5:	772DF42E980CA94A11799D9F78C5F347
SHA1:	B62D88619FB4BDE4EC6FC4BDB87ACA2C6E7EC058
SHA-256:	793952039D38075B96DFD76C5CB10A4D67A7120C9DFE3C5617C0D62BE3E5E7F6
SHA-512:	278712F0210DC8A3D6624A3E0E5B7B4B7417660BB0BF916A1B215B19A7C4B21554AE8D43E172B1CA42BCBA2C94A090CC7ACA8836B724306BEEAF5B3090463AC5
Malicious:	false
Reputation:	low
Preview:	/. Colorbox v1.4.31 - 2013-09-25. jQuery lightbox and modal window plugin. (c) 2013 Jack Moore - http://www.jacklmoore.com/colorbox. license: http://www.opensource.org/licenses/mit-license.php./.(function(e,q,u,y,X,R){function D(a,b){var d=typeof a[b];return"function"==d\|\|!("object"!=d\|\|!a[b])\|\|"unknown"==d}function na(){if(!U(navigator.plugins)&&"object"==typeof navigator.plugins["Shockwave Flash"]){var a=navigator.plugins["Shockwave Flash"].description;a&&!U(navigator.mimeTypes)&&navigator.mimeTypes["application/x-shockwave-flash"]&&navigator.mimeTypes["application/x-shockwave-flash"].enabledPlugin&&(Y=a.match(/\d+/g))}if(!Y)try{var b=new ActiveXObject("ShockwaveFlash.ShockwaveFlash");.Y=Array.prototype.slice.call(b.GetVariable("$version").match(/(\d+),(\d+),(\d+),(\d+)/),1)}catch(d){}if(!Y)return!1;a=parseInt(Y[0],10);b=parseInt(Y[1],10);ha=9<a&&0<b;return!0}function ca(){if(!P){P=!0;for(var a=0;a<c.length;a++)c[a]();c.length=0}}function M(a,b){P?a.call(b):c.push(function(){a.call

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 238 x 160, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11146
Entropy (8bit):	7.969722516316162
Encrypted:	false
SSDEEP:	192:Qamv6QPsly4lpcepktPhGTIMmdVWnvlzp0csi3K2ZFbyxwpnis1TbuBVMmMh9Xfp:Qa86QLscepYP2bvlzuc8GF2U/uZMh9nB
MD5:	D44CCBB36B818DC008C5AB202C4E5E91
SHA1:	8571E99CE2C2DA776A7D1CE0F6CBB44A0D93904F
SHA-256:	7B88B12B4925FCD2F7BBF4E53C11EAA21347F94632D18AC964E7DBB664CF22EE
SHA-512:	9868C4A82781460FB898A35092BCB7A14671CFD67A45C44777D4EDC9B44E76A16CCEBC16FF7CF2C74B16E28A47A7FA75B4FC937F1D42397C7B78303D3F26CBD2
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/mx_pages/neighborhood-news/images/NN_devices-238x160.png
Preview:	.PNG........IHDR.............<b......gAMA......a.....sRGB........7PLTE..................................................111.................. ......ppq....888.......................:y..............................................................................................]]]...6w.............1t....A~................g................tsp...........YZX@DE.........................................................n........`....}.......J...............V.......774.................................;HP....6..............y\|\|..fii.....~..JTX.\......$5...reV9MZ.RUF.h.....d....pLfp?.....\|..Db.frtet.lt..nS.....tRNS.;.........l .@.c...P.%.z..]ld... .IDATx..[...{z...I.....!`i...."......D..Aa.dD..,.(. @.a.6.m.6.../$v.4q.5.v.....H ..eKv../..f..~.~.}.?..3..........~.\|.......W~..[.E..O..a..~>........R.................M......'_...).._.....t.te .............dk)...ZQ.U.....f.........q.]..%.?...*.3U8..DX.yq.S.p...or.>.>J_..........>.Ib9.-......r

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	338546
Entropy (8bit):	5.6204088260624845
Encrypted:	false
SSDEEP:	3072:l4pK/29sqrXt9NJfGsO46emQsgyhKLeVKQS6x7m3QO7wQvN9td4/jGs7:l4p8yrXt9NJfMISVKQ/kQO7Bvbtev
MD5:	7B71C32F45994A7716C9A352ED0097DB
SHA1:	E4E31E1573DF87DF5FB617BC5AD18DF253CF6404
SHA-256:	D0443342FBDD2B577536B4944C0635F7558C489C9946531B239A16CBF89FC5D9
SHA-512:	69387B897CA310716F2847C288461E3E22E945EDC7889F03FDE3E04D4CBE3B4E2564EA99C2D5020593A219B08F44D14E091A0FAAB58B98835183CDFCC86B79B8
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.297900837815365
Encrypted:	false
SSDEEP:	24:E1FXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1FXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	70C7EFA4727493003D66E7F221E888E3
SHA1:	1F840C78248552F02BEFD3550E0401111D9AFB34
SHA-256:	D426094C168051F30C71C81F5A51FE910CD31D2CDB2138D71EA0DB1029C1186F
SHA-512:	B269539A0AAD9C5E5DB60691BE76F1BE76C45F74B69B2189D615BF1EABA2C820E37422594514536BB999B448F8375127FDC93B09C79CC36A3798E1FA23A92484
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/a62d836d\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65499), with no line terminators
Category:	downloaded
Size (bytes):	153025
Entropy (8bit):	5.508525902785313
Encrypted:	false
SSDEEP:	1536:nvenciugOWhYYWRaXJjQbjkvIugkLyO72OfCll/5himk12S3HUjZn4eFiBVfqfLc:nvcZ2OfCll/5hihU2Uc
MD5:	5D57E7ECF78B86B2517B749E377209F0
SHA1:	1E96E5573AFE3D8B5663A908272BA6F43FB42D5B
SHA-256:	661A747497E23EFBB5B82B7C79AC15DD3299C995B144AA30C2A2B08FEA3CD688
SHA-512:	C4580F895DDD858B89AFD8DD629707855710E0966C3A622F4BF143D8D25D56507BEE350491C229CE42724036517B71F60B6C63F4A4FA36C91456400284EFFF84
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/branding/company?callback=jQuery3710923492156920481_1729723842520&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&company_uuid=4216987&agent_uuid=b5555792-2a81-434a-ba98-10845eabb0dc&office_uuid=12153963&_=1729723842521
Preview:	/**/jQuery3710923492156920481_1729723842520({"status":"success","data":{"result_type":"Hash","result_list":[{"fonts":[{"name":"font_1","color":"#ffffff"},{"name":"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"secondary_body_font","color":"#333333"},{"name":"primary_background_font","color":"#ffffff"},{"name":"secondary_background_font","color":"#bbbbbb"},{"name":"highlight_contrast_font","color":"#ffffff"},{"name":"button_font","color":"#ffffff"}],"colors":[{"name":"primary_background_color","color":"#0f2b52"},{"name":"secondary_background_color","color":"#bbbbbb"},{"name":"tertiary_background_color","color":"#0f2b52"},{"name":"button_background_color","color":"#0f2b52"},{"name":"highlight_color_1","color":"#0f2b52"},{"name":"highlight_color_2","color":"#bbbbbb"}],"images":[{"url":"https://svc.moxiworks.com/service/v1/branding/images/bright_willow/bright_willow_blue-116x38.png","name":"LOGO_FOOTER_DARK"},{"url":"https://svc.moxiworks.com/service/v1/

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -112x-112, 32 bits/pixel
Category:	downloaded
Size (bytes):	85886
Entropy (8bit):	3.1871449520994624
Encrypted:	false
SSDEEP:	384:c88888888888888888888888888888888888888888888888888888888888888b:U+J4MBYT
MD5:	3D3716CA6079E616954C49EFC29D0655
SHA1:	E3E347CEFE93B96DF35DB7A2DF8715AD1CFDD2F4
SHA-256:	EFEF14D8D310D1994F20BDDA5A5C022EEC5E048A3703557A1C854E85CC31EBD0
SHA-512:	DF591A25CC41EC3F5B8308F10A458F352DE50A18D6F3F7694C13B51B692E8A9F1C1C3189C85F7F9064872B43E8ACBEF68667C3A469EC3E9604FA735704E675AA
Malicious:	false
Reputation:	low
URL:	https://images-static.moxiworks.com/static/images/br/cbwest/CB_Favicon_144x144.ico
Preview:	............ .hO......(....... ..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2200x1182, components 3
Category:	downloaded
Size (bytes):	193486
Entropy (8bit):	7.967904452256626
Encrypted:	false
SSDEEP:	3072:jbH0WLkWa6/dQkrW2pDiY58ZWm6Rw2a/H5iUVBlXeEweo/USI4azdV4ryzAaP+nh:XRYWa6/GiW2pD/8ZWRxuHzVBlXeFeoci
MD5:	0D571A5AB85272BAA6D5DD10C6AB0AB4
SHA1:	AA016BEF1D1817B6ECA7A1A9C88803F32FDE8E13
SHA-256:	48AFA1491A6C5DB4BA0A356CA18F12E752981A6EE28018B87FDC31447FDC2A7D
SHA-512:	59F25985A678B1DBA5342C829C1DCAE161BB0BCEB7CF5578FC74B1F57D8B146424C921C6B0D4D212674E639FE51E9E55BD65E7F64E1C08B228F0F5D044F2B8D0
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/images/customarea/responsive/default/background/external/nature4.jpg
Preview:	......JFIF.....H.H.....C....................................................................C......................................................................................................................].......................!1.AQ..aq..."..2......BRU.....#...&36bt.$%5CSru.DETcds...4........................................;..........................!1.Q"Aaq2...#3...B...Rr..4b..$.............?.....K.../..o.$z.^>..I=........vZfeYY.T9BQQ......D7.\|H.&....Yt..)$PQYe..4i.A..Y.\|..+B.....)Ql....\X..]E.......RZ...-..]".^aN..hTg)Y...5...+23hT.jXfZ,..P..a...\.Qi..!...5L.f..f.f....R...ef.......l..&V.H$...kfF.... .}D..O..J...i&E.[DQ."{.-.p,.KM.>..E..N..g.)E5.%HeS.B.,.....Ut....Z...M}A."...l..V.D.... ...K.....".eEor)O@..K.......@>$..2....%j._..<./0$.../.".ed...v@..T..}...S@^.A.......t#P..=....aW.`..`4.P.JU....0..B.V(;.G".......P!?...b......&.....R.@...h...."..ed~..:....`...Ve...."EfN.2.....B.P.X."......MQ.y.M.L..P...y.....H..K+VEZ. ..@AkB..f....R.-.-v...A.."...4...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 15
Category:	downloaded
Size (bytes):	3951
Entropy (8bit):	7.70540879288643
Encrypted:	false
SSDEEP:	48:MdXaufkCq9TwLlETYVhZ6xoNcv/ZAdWDIOF6BAi+M/7M51b8NyS+HRory4djtPXA:xihSTTTYVhZy9no9Q5JqL+N4TP6i
MD5:	674DA56466C7B4EFC2DA99257BAECE22
SHA1:	1C4631DD3983DE1CE40F00FAE426B0B28B11C24A
SHA-256:	C85AB34C0FFC6A71386C7E0EF87386F203992B46A3F519510F40545717F85400
SHA-512:	BFF4CA70DBF348EF1616ADA2CEA4569504F5AA8D247D1177846B23FA02B1F2B5D890169EBE1E0E3FD7BA23E9D42400D8D490B98FD04D744BA3D1B8A751C2872D
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/auth/images/ajax-loader.gif
Preview:	GIF89a..........DDD.....oooDDD......!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,................=...\|...7........YI....k......@.N.#..6Z.vd.tE'.y.V.J.49...W.5.]...oY.^..j..,g.>......~.Xxb....iw..v...............................................................................................................p ...!.......,...............".....^.1...YI...L[j[..&....u.....mF.N.c.......T...5imv._..&...e[..=...)z...-.~....}f.fy.iwrunp..........v...................................................................................................{.^.......!.3...A...!E...Vd. ...!.......,................='j..........X....W.L....Y...xz.......b.X.H#6.L.S.......tEqSp...j.=.p..B.e.M..x....iuyr..wz.~~......k....pd..q...................................................................................................O^Az......A...*.X.b.`.0d....^...>b...>.....!.......,................=..t"........Wj.7..YI.;......6..9.O.4.B............n"i.z.%..eX.%b

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x187, components 3
Category:	dropped
Size (bytes):	22092
Entropy (8bit):	7.960339393756679
Encrypted:	false
SSDEEP:	384:S47KrCsO28Ma9HMy2+Zn6hhyljxQxDSoNVo27woYKlDR+kVMMpmu+/vIlC:S47V28Ma9HMyvKhyYlSEwoBQkVMMX+Yc
MD5:	1A6785B2A53C3027E44B9E0199F12090
SHA1:	B425EF9BD8103DD3A7857366ED0C14B460BCF9ED
SHA-256:	59669880AD8FD6A7859531CD2883AE5B36A04F3A8B0E665E24F2F44F4BDBDFFB
SHA-512:	264BC66990DC645C1A812BC9AB2ADAF302914A1ACC9FB06970E5BFC315F50EE668C7EE98419DFAA6B846255BF4E7149BCC5BFA3D0C2B4B7DB771BA92F5BD154C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................D........................!.1A.."Qq23a...#.....4BR..$b.r...CS..%6s................................../.......................!1.."AQ.2Baq...#.................?..s....f.S2..>.WVl.I.3k.6...RE.!.s.rL(.]U.&...6..g.....p.....T.\|..:t.....R..6n.A.V.Y.y...N2..$.;dd........9.G$K..j.Wy.qX....LT.Nz..3...D..R.(.2//.........Y...n...K6.Z......N.....38vKTt.$m:.A.9..T..v<,.D...f..AD..(..0.z.I.s.......28.2T.h.^..f...M.5...A-..S..AKr.(&9......0.t.:..J..R..m...6...-....d..k..%.8..I7.I...9%&.t.X.....HxWy.}\...$4...p......!....t.........Q.%...+.B5,.....Paf=.$..R..e...L.%...s..c..y.q....Me.....=~^S.8....=Pt.....O..5\.2..no.s...i..,}..\L.R..M...`0.....w...M@...M.........~.7...Y..G9*.du....p.A%..-.&c.d.ML......k.b.w.I.c.$...F`.K....3...jT..1@v.w.V]...A..w.4i.........Y....N

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11396)
Category:	downloaded
Size (bytes):	379784
Entropy (8bit):	5.384668942080203
Encrypted:	false
SSDEEP:	6144:5L2/jmwkbfRDbnzFSYeLoptx4xlrOsbObrQrPU+L3+8prjN/2dl3:5LnVvJtx4xlrQoPZ3+8prEdl3
MD5:	4A009CAE722901F8D0DBDF4B1F0745C8
SHA1:	DC62846E2BF3626EAF4661F725F55185250E82E2
SHA-256:	FEABC64B8E95E52F19023D58ADAB2BA2868B9971929FDB8AD84ED461BAA24DFA
SHA-512:	5547A3D02A7FF5F1FFE1F2242AB5F4B99473B1AD4CD91F1F53D6819DD99A87A0F21F91FA6544C5E5466804B8D0304A0F1275DB3459E85BDB066B4CFC5E802276
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/wp-content/plugins/bwp-minify/cache/minify-b-flexslider-814ed83f9289c3e5ab877d6898687235.js?ver=A.3.49.20241022.0.6
Preview:	;(function($){$.flexslider=function(el,options){var slider=$(el),vars=$.extend({},$.flexslider.defaults,options),namespace=vars.namespace,touch=("ontouchstart"in window)\|\|window.DocumentTouch&&document instanceof DocumentTouch,eventType=(touch)?"touchend":"click",vertical=vars.direction==="vertical",reverse=vars.reverse,carousel=(vars.itemWidth>0),fade=vars.animation==="fade",asNav=vars.asNavFor!=="",methods={};$.data(el,"flexslider",slider);methods={init:function(){slider.animating=false;slider.currentSlide=vars.startAt;slider.animatingTo=slider.currentSlide;slider.atEnd=(slider.currentSlide===0\|\|slider.currentSlide===slider.last);slider.containerSelector=vars.selector.substr(0,vars.selector.search(' '));slider.slides=$(vars.selector,slider);slider.container=$(slider.containerSelector,slider);slider.count=slider.slides.length;slider.syncExists=$(vars.sync).length>0;if(vars.animation==="slide")vars.animation="swing";slider.prop=(vertical)?"top":"marginLeft";slider.args={};slider.manual

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	31298
Entropy (8bit):	5.397449310960436
Encrypted:	false
SSDEEP:	768:z2tlrp6y5+BHm4C4N1hmv0O/zrSO6/K3iM:Stlrp6y5+BGGLy/t6/K3iM
MD5:	686F51DAA7B9FE4FCAE3BD50C5064CAD
SHA1:	60ACDF3C278B8E665A05C88E2F191BC240644C11
SHA-256:	8F2C4BCB919E31182646D5E52650914F15A9CC8FF0847D30C4DC4ADCD4C2653C
SHA-512:	0ED84320BB3AAF13751E476CE5D8290A3D31E5C77B83074FF9F33EAB4BF8A268FB919E89F464FA2E98A78FC5CBFB5016CD6502AB01285A9878020A4BD23646F8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	downloaded
Size (bytes):	278092
Entropy (8bit):	5.0046404844273145
Encrypted:	false
SSDEEP:	1536:Z7p0XVk4q/WYZNpqQf7cqo4s/nck9ah1XyXYq/ccvaPePLnM4qQ4Xtq/Hra9nGlJ:vlKnd9jHyeXANC
MD5:	C745629362D957B7351E68398319A2AB
SHA1:	4102FFABD3B56B458AAEFB78DA969027FF5B4BC6
SHA-256:	7B57C362D401899552D943BE6A4E78776AFB298BE65DDC7E1D166AFF75291906
SHA-512:	F2C3F2F0E72A3D0184EE9E1063A0E66A9EE0E68983C73F2ABA654F9D6FF03FEBC686CD9A567BD5352BEC9263BAAEE2540756214821851FCF8DAA85996F506C2B
Malicious:	false
Reputation:	low
URL:	https://kristalittle.com/services/get-widget/?currency=USD&partialName=%20Featured%20Properties&class=featuredproperties&folder=featuredproperties&admin=0&options%5Bimagewidth%5D=437&options%5Bimageheight%5D=292&options%5Bshowarrows%5D=always&options%5Bcolumns%5D=2&options%5Brows%5D=2&options%5Bhidebuffer%5D=10&options%5Basync%5D=true&status=partial&name=0&data%5Btitle%5D=Featured%20Properties&data%5Blist%5D=894439&data%5Bnumblocks%5D=20
Preview:	<div class="featuredProperties">.<h3>Featured Properties</h3>.<div id="featuredproperties-0-featuredproperties" data-rows="2" data-cols="2" data-limit="20" class="featuredproperties responsive"><div class="sliderblocks"><div class="flexsliderblock featureblock cols2 sliberblock searchcard sliderblock block block1" ><div data-propcard-listing-id="185503522"><div class="searchcard-listing" data-raw-listing-obj="{"image":[{"full_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_full.jpg","gallery_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_gallery.jpg","thumb_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_thumb.jpg","title":"","raw_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_raw.jpg",&qu

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	120870
Entropy (8bit):	5.463568964793365
Encrypted:	false
SSDEEP:	3072:1AGiHdNqdKeiehWKhti+g+KCKlEgricGufxCqHek0h3I:GHnqdKeiehWKhtjg+KCKlEgricGufxCk
MD5:	BA46D63A4AD4FB4F1D2FD1F1424F4259
SHA1:	23EB5EE768A889E148D81984D8E189804640CE60
SHA-256:	B14FE1009DF318E698C77A4DC45B3CF7484D1DCF5FAF615167969470F018097F
SHA-512:	2D0A3CCD6C688957538C8B7AED087E217FEEF9B1EA82D3C4D02B8F1DF65DBF4903579001F0BD97EA61D3B0201DADA0823409B1590E585DC7A6DD6983FE855892
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var f7=function(a){g.Gk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},g7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.iha(a.D,b,c)},vsb=function(a){if(a instanceof g.sn)return a;.if(typeof a.Mm=="function")return a.Mm(!1);if(g.Sa(a)){var b=0,c=new g.sn;c.next=function(){for(;;){if(b>=a.length)return g.D1;if(b in a)return g.tn(a[b++]);b++}};.return c}throw Error("Not implemented");},wsb=function(a,b,c){if(g.Sa(a))g.kc(a,b,c);.else for(a=vsb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},xsb=function(a,b){var c=[];.wsb(b,function(d){try{var e=g.fq.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.uma(e)&&c.push(d)},a);.return c},ysb=function(a,b){xsb(a,b).forEach(function(c){g.fq.prototype.remove.call(this,c)},a)},zsb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1711)
Category:	dropped
Size (bytes):	99846
Entropy (8bit):	5.491325102635392
Encrypted:	false
SSDEEP:	3072:4LwNquN4vPLusFRd4VyU86yBbI4GbydQqdvFK4JfLSOZm6pA8/H+XIbY5qmU93q+:4LCnMRd4VyU86yBbI4SeQqdvFK4JfL7P
MD5:	70BEC25AAF2341FEC4F24916BD322AE4
SHA1:	3F85871B2B94FEF277DD61B77289315E5E651111
SHA-256:	6B37F9E0D5F5B2E8A9ECB857AB9D84056FCAC1BEE73C1279E85CB63B84BC538E
SHA-512:	E9DE3631EFDB7C72C37FD464734D6FF2F456D73B5ADEC5B1671F9A97632C5E876E5B873E2DD7A60274E28F65315B968D3724DB7AE2B767E44C9E12B08FC550E2
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('controls', function(_){var gIa,pM,qM,hIa,iIa,tM,kIa,lIa,mIa,nIa,uM,pIa,vM,wM,xM,yM,zM,rIa,qIa,sIa,AM,tIa,DM,uIa,vIa,wIa,BM,FM,CM,EM,HM,yIa,zIa,AIa,BIa,CIa,DIa,xIa,KM,FIa,EIa,LM,MM,HIa,GIa,IIa,JIa,KIa,NIa,NM,MIa,LIa,OIa,OM,PIa,QM,SM,TM,RIa,SIa,TIa,UM,VM,WM,UIa,VIa,XM,WIa,YM,ZIa,XIa,$Ia,ZM,cJa,bJa,dJa,eJa,bN,gJa,fJa,hJa,iJa,mJa,lJa,nJa,cN,oJa,pJa,qJa,dN,rJa,sJa,tJa,uJa,vJa,wJa,eN,xJa,yJa,zJa,AJa,BJa,CJa,EJa,gN,GJa,IJa,hN,JJa,KJa,LJa,MJa,OJa,PJa,NJa,QJa,RJa,SJa,UJa,VJa,YJa,ZJa,iN,$Ja,TJa,WJa,eKa,cKa,dKa,bKa,jN,fKa,gKa,hKa,.iKa,lKa,nKa,pKa,rKa,tKa,uKa,wKa,yKa,AKa,CKa,RKa,XKa,BKa,GKa,FKa,EKa,HKa,mN,IKa,YKa,kN,nN,PKa,kKa,DKa,SKa,KKa,MKa,NKa,OKa,QKa,lN,LKa,eLa,iLa,jLa,oN,kLa,lLa,pN,mLa,pLa,qLa,oIa;gIa=function(a,b,c){_.Gt(a,b,"animate",c)};pM=function(a){a.style.textAlign=_.AB.uj()?"right":"left"};qM=function(a){return a?a.style.display!=="none":!1};hIa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53809)
Category:	downloaded
Size (bytes):	55108
Entropy (8bit):	5.755438656237703
Encrypted:	false
SSDEEP:	1536:jsb1Yv0Bw0j4yJfXWmq6NP0AS83YrVa3v4hJrqDmnP:WY10EyJf3kMY5wuJmDmnP
MD5:	CEB396A867E89A0762DA369994CD94FF
SHA1:	30181415A732A1372BB12F303533C52C8FBCF83F
SHA-256:	22DE77078397174E303A42D2C2F1B489D3D39529368405F0C45994588BCBC444
SHA-512:	E8F9D0F8712A386D589E0F64FF54219ADEDEE3E69B68BA158A78750A66DDE851C3D8FE07DADBA00B5FDDB19A52C4B7BBE8B6E55E0E348B3F98B8D67B7B0E4558
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/It53B4OXF04wOkLSwvG0idPTlSk2hAXwxFmUWIvLxEQ.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Q(H){return H}var E=function(H){return Q.call(this,H)},b=this\|\|self,W=function(H,u,V,z,A,P,I,v,B,Z,r,D){for(D=21,Z=94;;)try{if(D==H)break;else if(D==37)Z=94,D=88;else if(D==V)b.console[A](r.message),D=z;else if(D==u)Z=2,v=B.createPolicy(P,{createHTML:E,createScript:E,createScriptURL:E}),D=z;else if(D==54)D=B&&B.createPolicy?u:79;else if(D==88)D=b.console?V:z;else{if(D==79)return v;if(D==z)return Z=94,v;D==21&&(B=b.trustedTypes,v=I,D=54)}}catch(n){if(Z==94)throw n;Z==2&&(r=n,D=37)}};(0,eval)(function(H,u){return(u=W(18,25,31,16,"error","ad",null))&&H.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7358
Entropy (8bit):	7.9448135966775055
Encrypted:	false
SSDEEP:	192:FWSgLI5p1amL3PgSrR56uwVXYBMZ5vD/Ujr:1H/rz+qMZ5vCr
MD5:	6E6E211F64CCFABF4ECBEDECC5B0155A
SHA1:	73C63E3F3FC591CDBCE73936400B01D940C1CE54
SHA-256:	7914A126F311E94642FE2903D11FB69AD437B32CDAF5847DD69E82C13ABA28A4
SHA-512:	450A50D8E76868868CF89AB15E80DAFEA847B41C0C97B74AE5AA019D36D2ABEDD6D7E43609541FB006A95BA23F94C42839D0D6507BCACA0027B44B51239E767E
Malicious:	false
Reputation:	low
URL:	https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJwmIJnoCKF6Zs4y4XbygGbcJe6v.jpg?width=500
Preview:	RIFF....WEBPVP8L..../....U...m..?.........\|...-m...e.m...V.&..x...J.%.s.#m.r9./fn..5..E.................<......_.W.c.r......:.X[1....P.b.v.h.....O\|R..L.ab.P.U.u:.1.........G...^...w9...i.^...)V9S\|r.Z..Z..T'yK.3.>:Ujf....-x..gCQwt.w0;.6....e..S..A.$......a..(.....h[..V....qwz.FB.E...`...,W ..{.0A.......d.Yr.yg.3......~....G}.......hP.=........8.......m#6j.F.....V.8.q..m.m.a...]..a..m3f.nP.hPs.b.m..j.....p.k.q2,..m7N..m3..6b.v....m.....<.n..m#993...k....,..m.m.m.m.m.../..Y ..4......<6..n...O...:.A....2O....fk..`. d....U..*.W..b...Z,.X..S.7CA.yb..e.h.@`.d..&...S.........6(.$DR..1.8.q..._..n...x....P..P....?..{X..^...?..xHB...x(Ry.~...Bg..."ia.<bR.`.....F..SY.7V[n+.S]H..@... ..B....Y....y.DfD^..:q.B<.x.'..H!............5.L.p.A...1 "../8H..C.A..1c..(9.. ...N\|.$.a.m./....TJ. d....L..[.]..HI)..;;.JL......AuH.:......:..8....u........J..A..y.....A..0...D..0..b..U$P.J...xI.W8.n......cO..T.2....y..,......@...m .0... ......5@.?.q.3.p._...@.y

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31650)
Category:	dropped
Size (bytes):	31819
Entropy (8bit):	5.128611885459931
Encrypted:	false
SSDEEP:	768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc
MD5:	ABDA843684D022F3BC22BC83927FE05F
SHA1:	26908395E7A9A4EAB607D80AA50A81D65F3017CB
SHA-256:	24CC29533598F962823C4229BC280487646A27A42A95257C31DE1B9B18F3710F
SHA-512:	3F1B46E9EA0FB6BE507605A2783AF406C6B4F885DEDAA4401BFF204B0FE9056656717411021594E2512E98A4E398E3238267A7DEAFEBA1B57E443DECAB0477EA
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){return a(b.target).is(this)?b.handleObj.handler.apply(this,arguments):void 0}}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2200x1182, components 3
Category:	dropped
Size (bytes):	193486
Entropy (8bit):	7.967904452256626
Encrypted:	false
SSDEEP:	3072:jbH0WLkWa6/dQkrW2pDiY58ZWm6Rw2a/H5iUVBlXeEweo/USI4azdV4ryzAaP+nh:XRYWa6/GiW2pD/8ZWRxuHzVBlXeFeoci
MD5:	0D571A5AB85272BAA6D5DD10C6AB0AB4
SHA1:	AA016BEF1D1817B6ECA7A1A9C88803F32FDE8E13
SHA-256:	48AFA1491A6C5DB4BA0A356CA18F12E752981A6EE28018B87FDC31447FDC2A7D
SHA-512:	59F25985A678B1DBA5342C829C1DCAE161BB0BCEB7CF5578FC74B1F57D8B146424C921C6B0D4D212674E639FE51E9E55BD65E7F64E1C08B228F0F5D044F2B8D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C......................................................................................................................].......................!1.AQ..aq..."..2......BRU.....#...&36bt.$%5CSru.DETcds...4........................................;..........................!1.Q"Aaq2...#3...B...Rr..4b..$.............?.....K.../..o.$z.^>..I=........vZfeYY.T9BQQ......D7.\|H.&....Yt..)$PQYe..4i.A..Y.\|..+B.....)Ql....\X..]E.......RZ...-..]".^aN..hTg)Y...5...+23hT.jXfZ,..P..a...\.Qi..!...5L.f..f.f....R...ef.......l..&V.H$...kfF.... .}D..O..J...i&E.[DQ."{.-.p,.KM.>..E..N..g.)E5.%HeS.B.,.....Ut....Z...M}A."...l..V.D.... ...K.....".eEor)O@..K.......@>$..2....%j._..<./0$.../.".ed...v@..T..}...S@^.A.......t#P..=....aW.`..`4.P.JU....0..B.V(;.G".......P!?...b......&.....R.@...h...."..ed~..:....`...Ve...."EfN.2.....B.P.X."......MQ.y.M.L..P...y.....H..K+VEZ. ..@AkB..f....R.-.-v...A.."...4...

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31984)
Category:	downloaded
Size (bytes):	255145
Entropy (8bit):	5.332166109638304
Encrypted:	false
SSDEEP:	3072:RzSHGGLY2736JRbIqf2kBj9tQqxokKo9FMbxu5/2I1u:RzSHGRRbI+2kBj9tlokKo9FQN
MD5:	B38E14DF288CF76D4A8D2BDEE11A2038
SHA1:	207925C06F4ACD4D61D7E44A9C3BD085A2C16EDC
SHA-256:	FE7F7A5DC1FB43AA9A22F4B5B1198370B13DADDCAFA0C9BEF3E45D7F16372A31
SHA-512:	4C569004AA97552990D09699AB4D05E822080868B842BDD0C875FBD1F41B37DF23E484C40ABBAA9C81E2441BCD166661AE7AE9C0891BF747FA702D4088939F49
Malicious:	false
Reputation:	low
URL:	https://disutgh7q0ncc.cloudfront.net/beacon.js
Preview:	!function(){window.WootricSurvey=window.WootricSurvey\|\|function(){function o(o,t,e){if(4!==t.length)throw new d.exception.invalid("invalid aes block size");var r=o.b[e],i=t[0]^r[0],n=t[e?3:1]^r[1],c=t[2]^r[2];t=t[e?1:3]^r[3];var a,l,s,u,m=r.length/4-2,p=4,f=[0,0,0,0];o=(a=o.s[e])[0];var w=a[1],h=a[2],g=a[3],b=a[4];for(u=0;u<m;u++)a=o[i>>>24]^w[n>>16&255]^h[c>>8&255]^g[255&t]^r[p],l=o[n>>>24]^w[c>>16&255]^h[t>>8&255]^g[255&i]^r[p+1],s=o[c>>>24]^w[t>>16&255]^h[i>>8&255]^g[255&n]^r[p+2],t=o[t>>>24]^w[i>>16&255]^h[n>>8&255]^g[255&c]^r[p+3],p+=4,i=a,n=l,c=s;for(u=0;u<4;u++)f[e?3&-u:u]=b[i>>>24]<<24^b[n>>16&255]<<16^b[c>>8&255]<<8^b[255&t]^r[p++],a=i,i=n,n=c,c=t,t=a;return f}function t(o,t){var e,r,i,n=t.slice(0),c=o.F,a=o.b,l=c[0],s=c[1],d=c[2],u=c[3],m=c[4],p=c[5],f=c[6],w=c[7];for(e=0;e<64;e++)r=(r=e<16?n[e]:(r=n[e+1&15],i=n[e+14&15],n[15&e]=(r>>>7^r>>>18^r>>>3^r<<25^r<<14)+(i>>>17^i>>>19^i>>>10^i<<15^i<<13)+n[15&e]+n[e+9&15]\|0))+w+(m>>>6^m>>>11^m>>>25^m<<26^m<<21^m<<7)+(f^m&(p^f))+a[e],w

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 117, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13097
Entropy (8bit):	7.967742195523805
Encrypted:	false
SSDEEP:	192:2+afjQXGEidDIxMpESjjGPtGf1ipimWvZHz/YBOhacgklJ68lT6gT:2+akXGEidMxMmSjCFGwpSJzBpg488r
MD5:	DA63AC5013BDD2AA6FC430EFDFFC3DEA
SHA1:	9CCA035973619998F282E8167469A7A97BB25CE0
SHA-256:	78606288D98D77C41B77246377D20877067D67C25B9892918F6C9A140AD635A9
SHA-512:	F380CF4C9B94C0AA583EB7D3408FE9761922AA3C123FDDC3EAABDBF16C566C45609DF2706E470D3B321817204EC48FB692C12518E396A234449696FB30960683
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......u......M.C....sRGB....... .IDATx..wx.........I(.E.AD.El...;.wE.+b.`.V...b..A..6...b...{.I ...-.....fvwv.%...<.${...e.=.V4a.P..A..I.J....(.E.P(..$.Hs....(BF..E{...B..,.hO@.P(..E.m.L....W..!....]...--.,.y.P(..}.&.]w.h.$................F]....M.P(...Mw.U.$...G.._A...0.u%.9}.{.W@Fr...P(..(.T.;.$...o..>....g.H^..km......p.IH...#.SR(..E.ifCw..?....^~.......FJM=.:X.}.B.P...z6.\|..:f..hE."<%.?...qyY.rrP(...lM.P(..v.....B.P...@W(........B.P(...%.[Bl...:......(...b......<..:.:e.g..PR.....))...b.E.....R..t.w.:.v.I.B.P(.Q@..D.9@......Y.q....h.q..B.P(.A..=X..~p1..w#9%......T.6.B.PD.%.@.hPS.....w.g....>.B.P(.....Pk..L.=..N?. ..u...(NL.P(..mF..nw.7....+k.......jGwD..AI.C...A...n........N.vW(..E.i.Nq..^g.].P... ..R..d&......FCM=...5..z .2. 3........h..3.4{m.Cx...........B.. .K.[4t..%.PW..Y......1h...w.sn:..).......F..:JwU.u{...l.%....5T/...r;@F......6.,"..Y.8t....k.k...Y.{...8...t..U+..r$..A.EB.4._.....c.......t.2....X.T..<.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1711)
Category:	downloaded
Size (bytes):	99846
Entropy (8bit):	5.491325102635392
Encrypted:	false
SSDEEP:	3072:4LwNquN4vPLusFRd4VyU86yBbI4GbydQqdvFK4JfLSOZm6pA8/H+XIbY5qmU93q+:4LCnMRd4VyU86yBbI4SeQqdvFK4JfL7P
MD5:	70BEC25AAF2341FEC4F24916BD322AE4
SHA1:	3F85871B2B94FEF277DD61B77289315E5E651111
SHA-256:	6B37F9E0D5F5B2E8A9ECB857AB9D84056FCAC1BEE73C1279E85CB63B84BC538E
SHA-512:	E9DE3631EFDB7C72C37FD464734D6FF2F456D73B5ADEC5B1671F9A97632C5E876E5B873E2DD7A60274E28F65315B968D3724DB7AE2B767E44C9E12B08FC550E2
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var gIa,pM,qM,hIa,iIa,tM,kIa,lIa,mIa,nIa,uM,pIa,vM,wM,xM,yM,zM,rIa,qIa,sIa,AM,tIa,DM,uIa,vIa,wIa,BM,FM,CM,EM,HM,yIa,zIa,AIa,BIa,CIa,DIa,xIa,KM,FIa,EIa,LM,MM,HIa,GIa,IIa,JIa,KIa,NIa,NM,MIa,LIa,OIa,OM,PIa,QM,SM,TM,RIa,SIa,TIa,UM,VM,WM,UIa,VIa,XM,WIa,YM,ZIa,XIa,$Ia,ZM,cJa,bJa,dJa,eJa,bN,gJa,fJa,hJa,iJa,mJa,lJa,nJa,cN,oJa,pJa,qJa,dN,rJa,sJa,tJa,uJa,vJa,wJa,eN,xJa,yJa,zJa,AJa,BJa,CJa,EJa,gN,GJa,IJa,hN,JJa,KJa,LJa,MJa,OJa,PJa,NJa,QJa,RJa,SJa,UJa,VJa,YJa,ZJa,iN,$Ja,TJa,WJa,eKa,cKa,dKa,bKa,jN,fKa,gKa,hKa,.iKa,lKa,nKa,pKa,rKa,tKa,uKa,wKa,yKa,AKa,CKa,RKa,XKa,BKa,GKa,FKa,EKa,HKa,mN,IKa,YKa,kN,nN,PKa,kKa,DKa,SKa,KKa,MKa,NKa,OKa,QKa,lN,LKa,eLa,iLa,jLa,oN,kLa,lLa,pN,mLa,pLa,qLa,oIa;gIa=function(a,b,c){_.Gt(a,b,"animate",c)};pM=function(a){a.style.textAlign=_.AB.uj()?"right":"left"};qM=function(a){return a?a.style.display!=="none":!1};hIa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	downloaded
Size (bytes):	300905
Entropy (8bit):	5.482945781545427
Encrypted:	false
SSDEEP:	6144:KVIvj27tfrDxyExsO40FyYZNgYCsGsRt0lcvm4N8W3VrQqDW+/fMheYULy/:KVIvj27drDxyExs50FyYEYYlcvm4Nt3U
MD5:	B0E91380D8D1FE01441DF47457D93211
SHA1:	F2E55BA7F64CE135DE25CEB1CA6B723DAC4D938B
SHA-256:	22D7B487C7ED16B6DB70AE6AAD638E15244B54CDF550AD8F0ADD612FCF1B1C69
SHA-512:	5F86A8634DB341D866BDA45EF127B00EDF696B5E2428BFB9EECCD64938202DC1DDE6CEB1505F057928AA828D0F528B88D15F49E65DD79DBDA658154F57A4FC4F
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/57/13/common.js
Preview:	google.maps.__gjsload__('common', function(_){var ega,fga,gga,hga,iga,jga,kga,lga,mga,nga,oga,qga,gr,sga,tga,mr,nr,vga,rr,tr,wr,wga,xga,yga,zga,Aga,Rr,Cga,Dga,Ega,Fga,Ur,Wr,Xr,Iga,Lga,Nga,bs,ds,Pga,Rga,Sga,Tga,Xga,Is,$ga,cha,fha,Ws,hha,gha,kt,lt,kha,nt,lha,mha,nha,oha,pha,qha,rha,sha,wha,xha,Aha,vt,Bha,wt,Cha,xt,Dha,yt,Bt,Dt,Fha,Iha,Jha,Lha,Pha,Qha,Kha,Rha,Tha,Uha,bu,Wha,Yha,$ha,mu,dia,Su,mia,oia,nia,sia,uia,xia,yia,zia,Aia,Bv,Hv,Fia,Iv,Lv,Gia,Mv,Hia,Pv,Tv,Nia,Oia,Qia,Sia,Ria,Uia,Tia,Pia,Via,cw,Zia,$ia,aja,hw,bja,Ija,Mja,Oja,Qja,dka,ry,Cka,Gka,.Eka,Jka,Nka,Oka,Wka,Xka,Yka,Zka,Ry,Sy,bla,cla,dla,ela,Ty,Hr,Gr,Mga,lr,uga,as,$r,Zr,Hga,Jga,Vy,Oga,Qga,Lx,Mx,gla,Nja,Kx,Nx,Uga,Vga,Rja,Wga,aha,Zy,hla,az,bz,ila,jla,lla,dz,mla,nla,fz,gz,ola,pla,iz,qla,jz,rla,sla,mz,tla,oz,ula,vla,qz,wla,xla,sz,tz,uz,vz,yla,zla,Ala,tha,vha,Fla,Gla,Hla,Ila,Jla,zz,Bx,Mla,Nla,Ola,Pla,Nha,Jt,Qla,jka,Bka,uka,Zt,aia,gu,Rla;_.dr=function(a,b){return _.aa[a]=b};ega=function(a,b){return _.vd(b)};fga=function(a){return a};gg

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, -112x-112, 32 bits/pixel
Category:	dropped
Size (bytes):	85886
Entropy (8bit):	3.1871449520994624
Encrypted:	false
SSDEEP:	384:c88888888888888888888888888888888888888888888888888888888888888b:U+J4MBYT
MD5:	3D3716CA6079E616954C49EFC29D0655
SHA1:	E3E347CEFE93B96DF35DB7A2DF8715AD1CFDD2F4
SHA-256:	EFEF14D8D310D1994F20BDDA5A5C022EEC5E048A3703557A1C854E85CC31EBD0
SHA-512:	DF591A25CC41EC3F5B8308F10A458F352DE50A18D6F3F7694C13B51B692E8A9F1C1C3189C85F7F9064872B43E8ACBEF68667C3A469EC3E9604FA735704E675AA
Malicious:	false
Reputation:	low
Preview:	............ .hO......(....... ..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	303030
Entropy (8bit):	5.580924218175742
Encrypted:	false
SSDEEP:	6144:RzxRo3k4a57kQBvi8ECFqXk9nN+YFBBNy2U31:Rzx2kr5rBKEWF
MD5:	8C8FF0893CB4787A1CAC80AB4C993BB1
SHA1:	DA20AA366B03DA167F2BFD9A18D392EF0E472356
SHA-256:	F3CDCD07DFC6EDCFDD22FAFA1AFA6CEF5C79BDDD839CE6A3563C3F18CC14C291
SHA-512:	5857B9DC951AECD319DF56937F1DBC234F182515A07C0A857AB6584FB9A020BC183D9E7132307F0FD56D19EF0785D4E86E31B52747872E50C511C1F258E5D88F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GYEG79KM6W&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	105
Entropy (8bit):	5.080141709250485
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQUdGWbW6kYBNNERfQVkh:UcHdXbXeUAUdlXsRfGq
MD5:	1B7519D802CBEDB0D2B150E890688BD2
SHA1:	E48B57C136F29C4837AF2533973846E976D5ACCB
SHA-256:	C261900468D379BB1F08B859CA7150D5B04711B0E14DF1E409C86725ECC50FA7
SHA-512:	18364B46792852322BE61E4FED4628B2D39459A5C219FFC6D21B708300B79EA8464E983AF5CBEE3C28E2F0668D46AFC25115ABDC15260198F1952A838E0930D5
Malicious:	false
Reputation:	low
URL:	https://svc.moxiworks.com/service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842518&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842519
Preview:	/**/jQuery3710923492156920481_1729723842518({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.799696085194834
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAkB+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/asQ:VKEc9EKo7LmvtUjPKtX7+1vQZ/rLrwUG
MD5:	0D3A1580607AA32454C311EAC0578D98
SHA1:	DCB4574F353B10944C752F2E8A22D6D413653DED
SHA-256:	D52BA13DD937F4A366D2612768F6392C52483E9FAE848288046D20AE585CB863
SHA-512:	D704617AED5D50240A56ED110AE0FD534609CF5488A574501FA2E67DEBD4301B670588E061A3BAC921ED03C384A61C1DFF851586B6DBD896AD6F7A8FC308C095
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV&ver=A.3.49.20241022.0.6
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1377
Entropy (8bit):	5.407863368649127
Encrypted:	false
SSDEEP:	24:81/MCOYUMaCAZzhMCOYUMaWtJc+u/rMCOYUMaXwy96cGSSf7:cECOxMaFCCOxMa4Jc+u4COxMaXN0xD
MD5:	2284FAC093D2CC9530CF8A0558E76C0A
SHA1:	034A694C91D802A9B8B5D717557BC1845F1CC8B5
SHA-256:	1318A5DA23D26C27B42AC11542124270429E0BB06EB20B1CF596D956BDF85504
SHA-512:	C1DC3F6E932AB4F56F5B4B078963DEF60C303CEE22A998CB116391B55CF795E6676F83208622417FBCC9971B2DD4D90843DE14E190FE8929567C6F0E0DB95350
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:wght@600&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Barlow Semi Condensed';. font-style: normal;. font-weight: 600;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlowsemicondensed/v15/wlpigxjLBV1hqnzfr-F8sEYMB0Yybp0mudRfp66_CGslu50.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Barlow Semi Condensed';. font-style: normal;. font-weight: 600;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlowsemicondensed/v15/wlpigxjLBV1hqnzfr-F8sEYMB0Yybp0mudRfp66_CWslu50.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Barlow Semi Condensed';. font-sty

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.799696085194834
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAkB+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/asQ:VKEc9EKo7LmvtUjPKtX7+1vQZ/rLrwUG
MD5:	0D3A1580607AA32454C311EAC0578D98
SHA1:	DCB4574F353B10944C752F2E8A22D6D413653DED
SHA-256:	D52BA13DD937F4A366D2612768F6392C52483E9FAE848288046D20AE585CB863
SHA-512:	D704617AED5D50240A56ED110AE0FD534609CF5488A574501FA2E67DEBD4301B670588E061A3BAC921ED03C384A61C1DFF851586B6DBD896AD6F7A8FC308C095
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (55795)
Category:	dropped
Size (bytes):	564724
Entropy (8bit):	5.4065480012642455
Encrypted:	false
SSDEEP:	6144:WsRISpSxY4SIytE8UFdJ0NzW9cWmiMKqxvke9ZIg0O6oV:WsKSpSxY4SIytEpdJ0NhhPgIV
MD5:	6CB71113B81BCBC6B97473F1254D5348
SHA1:	1CD6781FFBCECDBB8D1FDAC0CBFD7999148A1F92
SHA-256:	18A8E5D5CD38077638F84BB2EA9A6CE5298B58F6E31E40E0A57B9BA1870548E9
SHA-512:	0C428E275C95544DE311B54C92781AC20D3226FECB2109CE315D963B646CEF2A028FD99F458249D3E8B54FB440E8C00896FDF67F9C7334173DA78506FEB0BFD0
Malicious:	false
Reputation:	low
Preview:	if(typeof tb_pathToImage!='string'){var tb_pathToImage=thickboxL10n.loadingAnimation;}./!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/.jQuery(document).ready(function(){tb_init('a.thickbox, area.thickbox, input.thickbox');imgLoader=new Image();imgLoader.src=tb_pathToImage;});function tb_init(domChunk){jQuery('body').on('click',domChunk,tb_click).on('thickbox:iframe:loaded',function(){jQuery('#TB_window').removeClass('thickbox-loading');});}.function tb_click(){var t=this.title\|\|this.name\|\|null;var a=this.href\|\|this.alt;var g=this.rel\|\|false;tb_show(t,a,g);this.blur();return false;}.function tb_show(caption,url,imageGroup){var $closeBtn;try{if(typeof document.body.style.maxHeight==="undefined"){jQuery("body","html").css({height:"100%",width:"100%"});jQuery("html").css("overflow","hidden");if(document.getElementById("TB_HideSelect")===null){jQuery("body").append("<iframe id='TB_HideSelect'>"+thickboxL10n.noiframes+"</iframe><div id='TB_overlay'></div><

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31650)
Category:	downloaded
Size (bytes):	31819
Entropy (8bit):	5.128611885459931
Encrypted:	false
SSDEEP:	768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc
MD5:	ABDA843684D022F3BC22BC83927FE05F
SHA1:	26908395E7A9A4EAB607D80AA50A81D65F3017CB
SHA-256:	24CC29533598F962823C4229BC280487646A27A42A95257C31DE1B9B18F3710F
SHA-512:	3F1B46E9EA0FB6BE507605A2783AF406C6B4F885DEDAA4401BFF204B0FE9056656717411021594E2512E98A4E398E3238267A7DEAFEBA1B57E443DECAB0477EA
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js?ver=782b628426a895c0dfd7727f0e7fb402
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){return a(b.target).is(this)?b.handleObj.handler.apply(this,arguments):void 0}}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398)
Category:	downloaded
Size (bytes):	399
Entropy (8bit):	5.089290919704416
Encrypted:	false
SSDEEP:	12:RXfAS2SGD+5ArA/BmPE7zI/XwpHlpga86V+xaNmo:R723rAZmchHDgLgNT
MD5:	AC1B994013FB81A1E86A71440AFB73A6
SHA1:	10F978CB8532C22D61B8BE8F8BAA28A13617B90B
SHA-256:	9CE4F383B5EE9BC4D64C836585C7229F087076E2661A42CF992A720786E707B3
SHA-512:	5D15B600C7D3AC85F45E1D93B2A0E072618D8C3F9A63D59F05A0ABF9C2614EEA32ED7094A596F8D3C6183418D6830B56A741B80758FE1A80BF234489A1344E33
Malicious:	false
Reputation:	low
URL:	https://telize-v1.p.rapidapi.com/location?rapidapi-key=mKTYRiJxjxmshhou6VAm18RBVSJkp1eyJLYjsn6w8rRmBQPjDW&callback=jQuery3710923492156920481_1729723842526&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842527
Preview:	jQuery3710923492156920481_1729723842526({"is_in_european_union":false,"longitude":-96.8834,"city":"Dallas","timezone":"America\/Chicago","asn":8100,"offset":-18000,"region":"Texas","latitude":32.8167,"organization":"QuadraNet Enterprises LLC","country_code":"US","ip":"173.254.250.90","country_code3":"USA","postal_code":"75247","continent_code":"NA","country":"United States","region_code":"TX"});.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2466682
Entropy (8bit):	5.604915728894778
Encrypted:	false
SSDEEP:	24576:w+ZVY+A5VuzALqKon0U5MrWT2ZrrG/A1b3C0ugqARiTR:H3Y+A5VukLqK85Mr02ZrrX1j3u
MD5:	6D27386CDC145C245B4D12BCDEE3A9DC
SHA1:	9D4A0A8EBE46C740C47524BF296828AEDED91968
SHA-256:	251E20FCBB08A1CEC88ED5A0D011178A5F6E9BF2E11F103E83FA5F6F84DB73D8
SHA-512:	CFBC976944A9C15CAE871A5AE44D7FD01B76B8FEB53F8E6A42762D6C2D78FDAB05069131303DF7C5E4205CFA1D1F5DBF0823B2BE26285B6AC414843DF54D28B8
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	24023
Entropy (8bit):	7.889364547042675
Encrypted:	false
SSDEEP:	384:SgoOOkLr/hrpFsnUAX2lEQVh46qRH+9L5tpsO6tL2JeyLuvLkmkRcozE:trAZX2lTVh46v99AO6x2JepvLFBmE
MD5:	34B5539E8164AB5964F1190E1CE560C0
SHA1:	6BA50DEEA72A203291AA259756816152183E0CAF
SHA-256:	F6D7808AB16FA2662F67568CEC5A1CC4A29605E44CB073A13911675437CE8226
SHA-512:	71762B9D4077FEE7F002EBDEB85D2B5E41345750841E551523C04531450DCF618C471FED4867E1EF31244B6731ADB7014B374EBA9501A852C876D939D6C7BCD2
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/OLbXnrg27yk/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgTyg4MA8=&rs=AOn4CLDeWtQ7R3x_4CM2O6QdeLUfislR-A
Preview:	......JFIF................................................. ."' .,... 5),*444..D240"'(2...........&...&&2&2&&&&&2&2&&2-)&&&&&&2&&2&&2&2&&&&222&&&2&&&&&2..........."........................................Z........................!1.AQ.aq."2......BRe.....#Ed..Db........%fr..3cFst....$45CSU..................................+.......................!.1QR.A.a"q..B.#2.............?.................................................................................................................................................................................................................................................................................................................?..v..o.^.:.5...`.!......=\........`. ~l.........t5=\......o`. ......>....'CS...~m.........o`.!z..^.........k.>.?..+.U..\|.ZyN..\(...<...Oa..?6..[{...V.N..\......_a..~m......._)....x......?.3.w..*{..N.\|....`;..m.....A.6.[....V.W..W........?.1..[.....ui.:W....%.yo.......Oa..V.N..\8...<..Oa...y......_'J..@.....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120870
Entropy (8bit):	5.463568964793365
Encrypted:	false
SSDEEP:	3072:1AGiHdNqdKeiehWKhti+g+KCKlEgricGufxCqHek0h3I:GHnqdKeiehWKhtjg+KCKlEgricGufxCk
MD5:	BA46D63A4AD4FB4F1D2FD1F1424F4259
SHA1:	23EB5EE768A889E148D81984D8E189804640CE60
SHA-256:	B14FE1009DF318E698C77A4DC45B3CF7484D1DCF5FAF615167969470F018097F
SHA-512:	2D0A3CCD6C688957538C8B7AED087E217FEEF9B1EA82D3C4D02B8F1DF65DBF4903579001F0BD97EA61D3B0201DADA0823409B1590E585DC7A6DD6983FE855892
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a62d836d/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var f7=function(a){g.Gk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},g7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.iha(a.D,b,c)},vsb=function(a){if(a instanceof g.sn)return a;.if(typeof a.Mm=="function")return a.Mm(!1);if(g.Sa(a)){var b=0,c=new g.sn;c.next=function(){for(;;){if(b>=a.length)return g.D1;if(b in a)return g.tn(a[b++]);b++}};.return c}throw Error("Not implemented");},wsb=function(a,b,c){if(g.Sa(a))g.kc(a,b,c);.else for(a=vsb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},xsb=function(a,b){var c=[];.wsb(b,function(d){try{var e=g.fq.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.uma(e)&&c.push(d)},a);.return c},ysb=function(a,b){xsb(a,b).forEach(function(c){g.fq.prototype.remove.call(this,c)},a)},zsb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	109518
Entropy (8bit):	5.106399115782481
Encrypted:	false
SSDEEP:	768:ZbGxwUkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNae:ywldERdvGNIkabbRk3chs
MD5:	385B964B68ACB68D23CB43A5218FADE9
SHA1:	58A360D7EF24D8D05737DB1712DD5C086597E862
SHA-256:	B5FD723750763EBB731F9221E413E7D64D58D5192DC040E42292ED3DCCCCA732
SHA-512:	729F49483CA2D020C2BC17C52982D65DEBDBDEBF2146FE49C5CC4B914ABF2C4B4098E83B5F4CB3477A74C7F83E4B7696719C35F26871B025F27A5296997833CE
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:conten

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	105
Entropy (8bit):	5.070405576190366
Encrypted:	false
SSDEEP:	3:UcuMWSdXbXerFaXQXKH2W6kYBNNERfQVkh:UcHdXbXeUAaWXsRfGq
MD5:	D66B9DF4FD2A5CDAD8ACAC0B844C361D
SHA1:	455093BAB28EBAB6D71D9A539DC084978F44A300
SHA-256:	12F1F943A973DC69349CA9B7A0A656344B3B812B0F2466A88B9FE9063719F867
SHA-512:	C357D74A47A2D2277782B2B2BB2DA0636A11D92BCAAED57B8E42E9954F11C989421235375C0D80AF14AC70FA7A75CC628E9F9A014057815DD82877324DAE6ACF
Malicious:	false
Reputation:	low
Preview:	/**/jQuery3710923492156920481_1729723842524({"success":false,"error":"No authorization header provided"})

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10639)
Category:	downloaded
Size (bytes):	323922
Entropy (8bit):	5.679035432638816
Encrypted:	false
SSDEEP:	6144:enti7PJOuRbFAtpEzi3WOc6jQpGTR0JAzRVuNUYPY641dlmDY6UhBN/Sgq9bNw8p:enti7PJOuRbFAUec6aAzyi6Uh3Sg+bg0
MD5:	52B0C5ED140CBC76CA43CBF0B5C82D13
SHA1:	62CA61AD92FB218469CAEF4100D7DD73C59C31D8
SHA-256:	9F8B4F9E2992A777B86BFFB78B6A4C1E51FADFBCCE7FD0475BD03B252B1FA9E6
SHA-512:	3DBF119393906C49471C825F4EA8294207ACAF00577437B0B5D8353306A37EF2C66116F54155ED3D4F6EBD9CA8D51C9CAD87B1A043F0A6D19DEAC2DF3C0D02CF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?v=3&client=gme-windermeresolutions&libraries=places&channel=websites&language=en&region=US&ver=A.3.49.20241022.0.6
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en\u0026","https://khms1.google.com/kh?v=989\u0026hl=en\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en\u0026","https://khms1.google.com/kh?v=163\u0026hl=en\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixels-pa.googleapis.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474)
Category:	dropped
Size (bytes):	278092
Entropy (8bit):	5.0046404844273145
Encrypted:	false
SSDEEP:	1536:Z7p0XVk4q/WYZNpqQf7cqo4s/nck9ah1XyXYq/ccvaPePLnM4qQ4Xtq/Hra9nGlJ:vlKnd9jHyeXANC
MD5:	C745629362D957B7351E68398319A2AB
SHA1:	4102FFABD3B56B458AAEFB78DA969027FF5B4BC6
SHA-256:	7B57C362D401899552D943BE6A4E78776AFB298BE65DDC7E1D166AFF75291906
SHA-512:	F2C3F2F0E72A3D0184EE9E1063A0E66A9EE0E68983C73F2ABA654F9D6FF03FEBC686CD9A567BD5352BEC9263BAAEE2540756214821851FCF8DAA85996F506C2B
Malicious:	false
Reputation:	low
Preview:	<div class="featuredProperties">.<h3>Featured Properties</h3>.<div id="featuredproperties-0-featuredproperties" data-rows="2" data-cols="2" data-limit="20" class="featuredproperties responsive"><div class="sliderblocks"><div class="flexsliderblock featureblock cols2 sliberblock searchcard sliderblock block block1" ><div data-propcard-listing-id="185503522"><div class="searchcard-listing" data-raw-listing-obj="{"image":[{"full_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_full.jpg","gallery_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_gallery.jpg","thumb_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_thumb.jpg","title":"","raw_url":"https:\/\/i3.moxi.onl\/img-pr-001855\/svv\/378400623497be7d943e49f62b4f6e7a919e0ba3\/1_4_raw.jpg",&qu

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	downloaded
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3351
Entropy (8bit):	7.85060621536659
Encrypted:	false
SSDEEP:	48:LWycSphBdUirO3aEMudb2oy+v1kxho/aXgB1+Y11Og6tcRS8pEqp/HGWljfm3h6n:LWyNTrAqCCrXgB/11Wp83/vxfIh8VTy+
MD5:	9E9DD969CEB057A228067A1C539127F9
SHA1:	FB2DA26959858054157960BB7F8E6C145648EAAC
SHA-256:	DB209390B90B70F4B1EF3540CB581E4EC8EDBBA21980971B68E4AEF5C5D352FB
SHA-512:	0601582BF01D92EC6CB88B95C6246E3BC48EB2B477F733B1FD9D2614AE26ABDA7D2481B20AC89BB7C7F4BC63486AD713F3729ECD1E8279B0E2EA8025E0BE40C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...".........9.$.....IDATx........_..MI.....s2..O...;.9...2..s.en7.9.9.0'..a]nE.....>}.....N.....f~;..{ss.6.cv.z.._dz]r.%...!j.n...1........!j.n...D..P..O.$R&P..=..".(`.Fl.BPS}<K......P.j..g....4....S...l...G./.7X..".6.$....Hb....h.JB&..M<"....I(PrI..0..db)..V... .K9h"..s#(....E..A.F%v.....&..r....Z....!b.....0.H.4...L&.$"d.."B&.?}{.^..Yq..M,.. ..ynb.H...Co.x.x.%.......-.M.%.\|d..C....y$b...D....<....."............}"...X.#.Si.q.\.:...J........qNV!.!!..9c..BfOp#0...!.e..72.K....y.$...V"$.$IP..D.q.."....Y.".....9...8....".H/...+..-..d.O..xa8F...?}k....2...=..$4.M.H..J.!.d..9.....,.%..+)b@..@.P..%...........)...b.B..(.H..D.r..j.1 g"...5:I...R....$Q....i..2..&..D..s?r.W.~..[.l...\|.3..-y.I..R.H......."..h.!Q...YDRP..N(P....M..2".E...s.:.;....0.+...H..r.6G4PLF...sd..b`.F..u>..#.I(.2 ."...Ns.".o..e.....R...@...I,d.....H....b.K...D.0i.dB.1..`9~.W...k0.......V.....L.d..s.Ff....u....^s........(....x.........q.j.7.`...n.>.\\|.V ..=.....#P

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:50:25.174890041 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 24, 2024 00:50:26.221750021 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:26.221935987 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:28.909805059 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:29.221695900 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:29.831043959 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:29.987401009 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 24, 2024 00:50:31.034246922 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:32.326170921 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:32.326203108 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:32.326270103 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:32.327219009 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:32.327231884 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.092546940 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.092680931 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.098001957 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.098009109 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.098248959 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.107975960 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.155324936 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.355977058 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.356009007 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.356024027 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.356098890 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.356112957 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.356173038 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.442200899 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:33.474766970 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.474802017 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.474869967 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.474884987 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.475017071 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.594724894 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.594758034 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.594799042 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.594808102 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.594862938 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.712852955 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.712893009 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.712946892 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.712970972 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.712997913 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.713025093 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.831929922 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.831955910 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.832062006 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.832075119 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.832130909 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.950274944 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.950297117 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.950597048 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:33.950612068 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:33.950659037 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.069220066 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.069246054 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.069474936 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.069490910 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.069561958 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.189136028 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.189158916 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.189259052 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.189271927 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.189348936 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.234405041 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.234427929 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.234524012 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.234539032 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.234576941 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.309042931 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.309077024 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.309174061 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.309190989 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.309231997 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.427110910 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.427138090 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.427218914 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.427237988 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.427290916 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.545809031 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.545840025 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.545892954 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.545909882 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.545931101 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.545947075 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.591173887 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.591198921 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.591247082 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.591278076 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.591298103 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.591332912 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.591339111 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.591376066 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.594177008 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.594197989 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.594211102 CEST	49706	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.594216108 CEST	443	49706	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.697598934 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.697652102 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.697772980 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.698539019 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.698584080 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.698672056 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.699764967 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.699783087 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.699852943 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.699912071 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.699923038 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.700355053 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.700366974 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.700428963 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.700500011 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.700510979 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.700536966 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.700542927 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.701138973 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.701178074 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.701241016 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.701282024 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.701293945 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:34.701361895 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:34.701380968 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.342331886 CEST	49717	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:35.342833042 CEST	49718	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:35.347938061 CEST	80	49717	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:35.348041058 CEST	49717	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:35.348193884 CEST	80	49718	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:35.348215103 CEST	49717	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:35.348248959 CEST	49718	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:35.353760004 CEST	80	49717	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:35.442823887 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.443407059 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.443428040 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.444103956 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.444114923 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.445884943 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.446480989 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.446547985 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.446899891 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.446917057 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.447978020 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.448365927 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.448399067 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.448739052 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.448746920 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.449290991 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.449652910 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.449662924 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.449896097 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.450135946 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.450140953 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.450315952 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.450337887 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.450742960 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.450752020 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577131987 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577157974 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577204943 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577217102 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577223063 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577225924 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577272892 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577305079 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577326059 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577373981 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577383041 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577428102 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577457905 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577500105 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577531099 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577574968 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577616930 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577635050 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577675104 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577905893 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577917099 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577933073 CEST	49713	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577939034 CEST	443	49713	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.577949047 CEST	49712	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.577964067 CEST	443	49712	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.578304052 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.578316927 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.578330994 CEST	49716	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.578336000 CEST	443	49716	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.583164930 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.583322048 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.583331108 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.583421946 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.583554983 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.583610058 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.587024927 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.587064028 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.587418079 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.589133024 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.589160919 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.589257956 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.589385033 CEST	49714	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.589400053 CEST	443	49714	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.590704918 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.590723991 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.590737104 CEST	49715	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.590742111 CEST	443	49715	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.592000961 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.592025042 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.594196081 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.594197035 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.594209909 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.594225883 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.594288111 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.594883919 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.594897032 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.594955921 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.595143080 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.595154047 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.595680952 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.595689058 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.595741987 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.598954916 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.598967075 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.599482059 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:35.599489927 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:35.835585117 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:35.835592031 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:36.285219908 CEST	80	49717	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:36.320749044 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.324830055 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.324853897 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.325390100 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.325630903 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.325639963 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.326433897 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.326452017 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.327042103 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.327048063 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.329927921 CEST	49717	80	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:36.332215071 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.333111048 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.333127975 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.333600044 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.333606005 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.340377092 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.347549915 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.358892918 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:36.358939886 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:36.359178066 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:36.359478951 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:36.359492064 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:36.360388994 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.360400915 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.361210108 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.361210108 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.361217976 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.361244917 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.365772009 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.365777016 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.460917950 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.461003065 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.461097956 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.476402998 CEST	49720	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.476442099 CEST	443	49720	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.478390932 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.478462934 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.478565931 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.488430977 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.488518953 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.488635063 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.495452881 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.495534897 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.495615959 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.502372980 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.502460003 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.502568007 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.540961981 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.540961981 CEST	49723	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.540999889 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.541016102 CEST	443	49723	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.678052902 CEST	49719	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.678080082 CEST	443	49719	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.680085897 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.680119038 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.680226088 CEST	49722	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.680234909 CEST	443	49722	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.682256937 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.682286978 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.682318926 CEST	49721	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.682327032 CEST	443	49721	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.693598032 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.693639994 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.693698883 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.694818020 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.694830894 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.694881916 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.695271015 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.695292950 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.695529938 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.695718050 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.695725918 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.695807934 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696274996 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696283102 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696286917 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.696297884 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.696341991 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696407080 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696414948 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.696479082 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696485043 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.696541071 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696551085 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:36.696624994 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:36.696634054 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.089137077 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.089451075 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.089481115 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.090624094 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.090687990 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.092072010 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.092159986 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.092257023 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.092271090 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.142429113 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.294457912 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.335340023 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.335369110 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.377557993 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.411619902 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411636114 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411660910 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411678076 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411684990 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411716938 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.411752939 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.411783934 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.412401915 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.412494898 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.412494898 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.412506104 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.416805029 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.421729088 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.422368050 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.422396898 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.422969103 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.422974110 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.427464962 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.428354979 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.428366899 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.428952932 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.428956985 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.429718018 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.430310965 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.430339098 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.430727005 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.430732012 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.442214012 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.442986012 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.443370104 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.443403959 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.444272995 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.444278955 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.444921017 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.444958925 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.446962118 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.446979046 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.529827118 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.529840946 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.529879093 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.529906988 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.529911995 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.529963017 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.529983044 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.530127048 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.556621075 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.556806087 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.557009935 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.557049036 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.557049036 CEST	49730	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.557069063 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.557080030 CEST	443	49730	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560344934 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560384989 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560410023 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560511112 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560683012 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560693979 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560698986 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560759068 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560817003 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560836077 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.560849905 CEST	49729	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.560857058 CEST	443	49729	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.564035892 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.564080000 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.564263105 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.564647913 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.564665079 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.573602915 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.573775053 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.573900938 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.573964119 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.573981047 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.573997021 CEST	49727	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.574002028 CEST	443	49727	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.576817036 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.576848030 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.576884985 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.576905966 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.576957941 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.576984882 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.577109098 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.577126026 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.577138901 CEST	49731	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.577143908 CEST	443	49731	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.577264071 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.577277899 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.579662085 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.579701900 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.579901934 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.580099106 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.580117941 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.606112957 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.606699944 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.645664930 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.645821095 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.645895958 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.645939112 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.645951033 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.645966053 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.645991087 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.645993948 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.646229029 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.646238089 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.692704916 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.710119009 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.710201025 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.710263968 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.710390091 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.710410118 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.710427046 CEST	49728	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.710433006 CEST	443	49728	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.713181973 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.713227034 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.713299990 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.713433027 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:37.713444948 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:37.763369083 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.763385057 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.763421059 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.763474941 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.763492107 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.763536930 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.763536930 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.856118917 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:37.856158018 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:37.856267929 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:37.856489897 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:37.856506109 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:37.906809092 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.906841993 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.906903028 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.906918049 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.906989098 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.906989098 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.998358011 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.998387098 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:37.998507023 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.998507023 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:37.998522997 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.000787020 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.115644932 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.115725994 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.115729094 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.115751028 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.115796089 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.115814924 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.232887983 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.232920885 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.232975006 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.232989073 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.233021021 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.233037949 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.254728079 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:38.297689915 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.300734043 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.300759077 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.301294088 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.301299095 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.303579092 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.304676056 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.304676056 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.304708004 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.304716110 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.315013885 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.316541910 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.316555977 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.316787004 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.316791058 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.320326090 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.320929050 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.320947886 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.321643114 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.321647882 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.349330902 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.349359989 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.349421024 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.349447966 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.349466085 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.349519014 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.428829908 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.428924084 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.428986073 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.436078072 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.436235905 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.436512947 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.436532974 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.436547995 CEST	49734	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.436554909 CEST	443	49734	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.436554909 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.445957899 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.446027040 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.446110010 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.452795982 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.453054905 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.453107119 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.453887939 CEST	49736	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.453911066 CEST	443	49736	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.455885887 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.459340096 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.459340096 CEST	49733	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.459362984 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.459372044 CEST	443	49733	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.460793972 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.460793972 CEST	49735	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.460805893 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.460814953 CEST	443	49735	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.464818001 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.464848042 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.465511084 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.465516090 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.466439009 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.466460943 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.466515064 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.466541052 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.466557980 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.466605902 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.492758989 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.492798090 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.492866039 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.494571924 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.494610071 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.494676113 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.494941950 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.494955063 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.499804020 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.499816895 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.500544071 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.500588894 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.500637054 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.501461983 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.501477957 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.504559994 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.504575014 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.504736900 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.506691933 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.506702900 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.542035103 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.542058945 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.542107105 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.542138100 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.542152882 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.542191029 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.581881046 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.581928015 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.582005978 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.582767963 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.582811117 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.582865953 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.583096981 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.583108902 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.583271027 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.583281994 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.584537983 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.584558010 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.584633112 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.584641933 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.584690094 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.592560053 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.592621088 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.592784882 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.595779896 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:38.595794916 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:38.595840931 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:38.597512960 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.597529888 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:38.597595930 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.597799063 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.597826004 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:38.598093033 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.601296902 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.601309061 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:38.601469040 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:38.601481915 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:38.601605892 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:38.601619005 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:38.617475033 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.617494106 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.617645979 CEST	49737	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.617650986 CEST	443	49737	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.629256964 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.629271030 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.629347086 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.635123968 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:38.635132074 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:38.691817999 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:38.691834927 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:38.691900015 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:38.693938971 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:38.693949938 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:38.701349020 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.701376915 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.701420069 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.701432943 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.701462030 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.701483965 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.724148989 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:38.724370956 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:38.724386930 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:38.726249933 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:38.726314068 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:38.727283955 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:38.727385998 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:38.743031979 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743076086 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:38.743185043 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743279934 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743310928 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:38.743411064 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743580103 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743592978 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:38.743808985 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:38.743819952 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:38.768979073 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:38.768994093 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:38.818137884 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.818166018 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.818231106 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.818262100 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.818279028 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.818380117 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.819338083 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.819359064 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.819399118 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.819407940 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.819434881 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.819452047 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.819912910 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:38.948065996 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.948088884 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.948146105 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.948164940 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:38.948193073 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:38.948215008 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.011171103 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.011198044 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.011339903 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.011358023 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.011425018 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.065248013 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.065314054 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.065342903 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.065359116 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.065403938 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.067513943 CEST	49726	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.067534924 CEST	443	49726	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.209770918 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.211143017 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.216480017 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.217226028 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.217247009 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.217359066 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.217382908 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.217775106 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.217792988 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.218458891 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.218549013 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.218564987 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.218612909 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.218812943 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.218874931 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.219702959 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.219779015 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.229346037 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.231064081 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.231436968 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.237453938 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.244559050 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.244781017 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.244784117 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.244863033 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.244884014 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.244898081 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.245326042 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.245340109 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.245574951 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.245604038 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.249393940 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.249433994 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.249663115 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.249702930 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.249767065 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.249773979 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.250370026 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.250376940 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.250561953 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.250579119 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.250716925 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.250732899 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.251157999 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.251163960 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.251219988 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.251224995 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.298109055 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.298113108 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.298316956 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.317404985 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.318077087 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.318114996 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.318591118 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.319073915 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.319108009 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.319185019 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.319523096 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.319540024 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.319700956 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.319957018 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.320921898 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.321000099 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.321446896 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.363368034 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.367326975 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.371958017 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.372040987 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.372086048 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.372136116 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.372153044 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.372173071 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.372220039 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.374892950 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.374903917 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.374931097 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.374957085 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.375001907 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.375027895 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.375051975 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.375133038 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.375277042 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.377881050 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.377957106 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.378551960 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.381697893 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.381861925 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.381926060 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.381954908 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382076025 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382133961 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.382143974 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382236004 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382287979 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.382293940 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382395983 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.382682085 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.382688046 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.383779049 CEST	49741	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.383810043 CEST	443	49741	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.385431051 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.385431051 CEST	49739	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.385500908 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.385551929 CEST	443	49739	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.386318922 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.386332989 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.386344910 CEST	49742	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.386349916 CEST	443	49742	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.387698889 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.388367891 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.388416052 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.388448954 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.388480902 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.388501883 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.388514042 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.388531923 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.389055014 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.389091969 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.389122963 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.389142990 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.389149904 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.389172077 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.389615059 CEST	49746	443	192.168.2.10	151.101.65.229
Oct 24, 2024 00:50:39.389620066 CEST	443	49746	151.101.65.229	192.168.2.10
Oct 24, 2024 00:50:39.389981031 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.389985085 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.389996052 CEST	49740	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.389998913 CEST	443	49740	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.395457029 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.395495892 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.395586967 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.396441936 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.396476984 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.396863937 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.396868944 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.401520967 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.401556969 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.401767969 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.402024984 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.402038097 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.413836956 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.413862944 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.422466993 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.422498941 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.422687054 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.423077106 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.423090935 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.423333883 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.423388004 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.423527956 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.423585892 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.423595905 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.426161051 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.426191092 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.442627907 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.442656040 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.473200083 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.476210117 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.476578951 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.476603985 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.477722883 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.477797031 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.478260040 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.478611946 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.478648901 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.479089022 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.479171991 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.479433060 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.479440928 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.479599953 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.479656935 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.480468988 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.480545044 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.480742931 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.480757952 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.489168882 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.498594046 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498706102 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498754978 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498811007 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.498836994 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498874903 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498924971 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.498930931 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.498987913 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.499281883 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.507401943 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.507569075 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.507602930 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.507662058 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.507672071 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.508339882 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.508488894 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.508526087 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.508546114 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.508553028 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.508860111 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.508933067 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.520102978 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.521703005 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.521775007 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.521883011 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.521902084 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.522392988 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.522408962 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.522476912 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.522505045 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.535572052 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.540652037 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.540731907 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.540755033 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.540781021 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.542145967 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.554040909 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.554171085 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.556878090 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.556889057 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.557157040 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.566643000 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.566648960 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.566783905 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.566791058 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.598756075 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 24, 2024 00:50:39.598763943 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.599391937 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.606328964 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606457949 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606532097 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606580019 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606688976 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606745958 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.606774092 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606787920 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606791973 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606818914 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606848955 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.606873035 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.606877089 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.606998920 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.607218981 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.607317924 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.607407093 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.607414961 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.608038902 CEST	49753	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.608052969 CEST	443	49753	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.608876944 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.608920097 CEST	443	49752	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.608972073 CEST	49752	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.614129066 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.614794016 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.614825010 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.615127087 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.615350962 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.615361929 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.615370989 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.615521908 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.615562916 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.615617990 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.615627050 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.615983009 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.616019964 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.616030931 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.616036892 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.616106987 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.616153002 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.616158962 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.626517057 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.626574993 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.627058029 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.627080917 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.627087116 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.627095938 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.627178907 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.627192974 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.628717899 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.631333113 CEST	49747	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.631354094 CEST	443	49747	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.640264988 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.640281916 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.640374899 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.640387058 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.641134977 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.641153097 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.641199112 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.641227007 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.641258955 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.641266108 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.643332958 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.657835960 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.657875061 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.657960892 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.657991886 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.660847902 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.669404984 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.669447899 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.669533014 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.669661045 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.669687986 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.669740915 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.669909000 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.669920921 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.670051098 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:39.670064926 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:39.692688942 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.692689896 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.732795954 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732853889 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732880116 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732906103 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732930899 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732935905 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.732964039 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.732980013 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.733012915 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.733017921 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.759485006 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.759501934 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.759537935 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.759552002 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.759565115 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.759581089 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.759641886 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.759758949 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.761142969 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.761157036 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.761178017 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.761187077 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.761205912 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.761235952 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.761254072 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.761275053 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.774718046 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.774806023 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.774817944 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.774838924 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.774894953 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.845103025 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.845189095 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.845343113 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.845393896 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.845416069 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.845416069 CEST	49751	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.845426083 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.845433950 CEST	443	49751	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.849494934 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.849509954 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.849592924 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.849929094 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.849937916 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.849997044 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.850009918 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.850789070 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.850894928 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.850902081 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.851028919 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.878649950 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.878664017 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.878696918 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.878756046 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.878773928 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.878793955 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.879508972 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879590034 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879612923 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.879620075 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879662037 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879662991 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.879709005 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879726887 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.879740000 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.879779100 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.882747889 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.882781029 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.882874012 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.883251905 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:39.883264065 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:39.891959906 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.892106056 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.915796041 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.915987968 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.916079998 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.916204929 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.916204929 CEST	49750	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.916224957 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.916235924 CEST	443	49750	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.919531107 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.919574976 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.919696093 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.919858932 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:39.919873953 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:39.966379881 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.966459036 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.966783047 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.966875076 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.967729092 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:39.967793941 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:39.998773098 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.998801947 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.998867035 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.998899937 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.998914957 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.998979092 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.999382019 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.999443054 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.999466896 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.999485016 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.999502897 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.999525070 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.999538898 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:39.999777079 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:39.999996901 CEST	49745	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.000011921 CEST	443	49745	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.010260105 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.010334969 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.083415985 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.083508015 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.083853960 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.083909988 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.084253073 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.084361076 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.118253946 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.118285894 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.118370056 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.118401051 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.118442059 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.128480911 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.128524065 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.128554106 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.128581047 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.128598928 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.128623962 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.128626108 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.128827095 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.129323959 CEST	49748	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:40.129348993 CEST	443	49748	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:40.135173082 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.135993958 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.136028051 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.136626005 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.136636019 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.152005911 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.152669907 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.152700901 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.153292894 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.153300047 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.168680906 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.168843031 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.169306040 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.169306993 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.169327974 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.169343948 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.169801950 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.169816017 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.170118093 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.170125008 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.238922119 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.238948107 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.239036083 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.239067078 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.239157915 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.272232056 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.272317886 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.272464037 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.273363113 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.273363113 CEST	49756	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.273386002 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.273406029 CEST	443	49756	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.277373075 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.277417898 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.277528048 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.277777910 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.277789116 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.288064003 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.288146973 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.288222075 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.288669109 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.288669109 CEST	49755	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.288687944 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.288697004 CEST	443	49755	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.291965961 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.292011023 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.292221069 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.292635918 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.292654037 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.302867889 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.302939892 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.303006887 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.303277016 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.303296089 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.303308010 CEST	49757	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.303322077 CEST	443	49757	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.303914070 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.304003000 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.304059982 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.304243088 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.304243088 CEST	49758	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.304263115 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.304274082 CEST	443	49758	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.307189941 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.307234049 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.307322979 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.307488918 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.307501078 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.307538033 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.307579041 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.307821989 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.308063984 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:40.308078051 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:40.357914925 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.358264923 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.358292103 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.358644962 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.359556913 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.359582901 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.359597921 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.359662056 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.359666109 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.359680891 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.359744072 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.359744072 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.360245943 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:40.403332949 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:40.406932116 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.407260895 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.407277107 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.408422947 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.408513069 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.412177086 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.412307024 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.412842989 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.412853003 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.414336920 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.414546967 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.414563894 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.416074038 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.416141033 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.416419983 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.416507006 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.416548967 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.456275940 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.456423998 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:40.456439972 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:40.502769947 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.241636992 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.241653919 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.241693974 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.241729975 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.241756916 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.241791964 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.241820097 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.242014885 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.242038965 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.242120028 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.242129087 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.242153883 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242181063 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.242386103 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242417097 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242439032 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242444992 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242466927 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242491961 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242494106 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242546082 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242551088 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242614985 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242640972 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242667913 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242671967 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242718935 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.242738962 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.242748022 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.242782116 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242804050 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.242892981 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.242909908 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.243225098 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243299007 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243341923 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243350029 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.243365049 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243407011 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243448973 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.243448973 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243462086 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243490934 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.243530035 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.243652105 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.243676901 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.243726015 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.243727922 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.243733883 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.243782997 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.246413946 CEST	49760	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.246433973 CEST	443	49760	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.248538971 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.248617887 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.249350071 CEST	49761	443	192.168.2.10	151.101.2.133
Oct 24, 2024 00:50:41.249362946 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.249366999 CEST	443	49761	151.101.2.133	192.168.2.10
Oct 24, 2024 00:50:41.249392033 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.249448061 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.249454021 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.249517918 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.249949932 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.249994993 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.250036001 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.250050068 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.250078917 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.250582933 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.250636101 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.250648975 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.250751972 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251080036 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251122952 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251149893 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251154900 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251200914 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251254082 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251292944 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251344919 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251352072 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.251363039 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251413107 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.251672029 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.251677036 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.251950026 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.252846956 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.252871990 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.252940893 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.252948999 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.252990007 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.253122091 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.253151894 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.253185034 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.253191948 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.253226042 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.253534079 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.253535032 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.253585100 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.253591061 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.255234957 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.255264044 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.255326986 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.255333900 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.255367041 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.255410910 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.257358074 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.257386923 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.257436037 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.257446051 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.257510900 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.258461952 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.258501053 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.258547068 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.258568048 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.258594990 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.258618116 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.259754896 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.259772062 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.259840012 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.259848118 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.260792017 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.260819912 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.260895014 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.260912895 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.260977983 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.262006044 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.262027979 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.262104034 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.262119055 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.262166977 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.263670921 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.263689995 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.263776064 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.263783932 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.295331001 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.302803993 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.302829027 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.302990913 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.303014994 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311567068 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311623096 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311660051 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.311687946 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311708927 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.311709881 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311742067 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.311748981 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.311774015 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.346669912 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.361908913 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.379045963 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.380866051 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.381175041 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.381906986 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.387201071 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.387233019 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.387336016 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.387367010 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.387439013 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.388689041 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.390055895 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.390096903 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.390538931 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.390552044 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.390818119 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.390849113 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.391175032 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.391180038 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.391443968 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.391469955 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.391814947 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.391819954 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.392014027 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.392026901 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.392359018 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.392363071 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.397711039 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.397753954 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.398063898 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.398070097 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.419739962 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.419755936 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.419776917 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.419831038 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.419862986 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.419894934 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.419924021 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.466137886 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.466180086 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.466231108 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.466259956 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.466295004 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.466308117 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.496618032 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.496695995 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.496939898 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.516731977 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.517466068 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.517601013 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.519196033 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.519422054 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.519504070 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.519711018 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.519917011 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.519984961 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.522753954 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.522911072 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.523005962 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.524013042 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.524158955 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.524231911 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.536984921 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.537009001 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.537091017 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.537118912 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.539871931 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.546442986 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.546473026 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.546614885 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.546643019 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.546693087 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.585012913 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.585037947 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.585099936 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.585119963 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.585227013 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.615716934 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.615740061 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.615911007 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.615925074 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.616010904 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.625833035 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.625883102 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.625935078 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.625967979 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.626043081 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.732670069 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.732692957 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.732860088 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.732887983 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.735323906 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.762633085 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.762671947 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.762691021 CEST	49767	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.762697935 CEST	443	49767	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.765465021 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.765501022 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.765815973 CEST	49764	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.765825033 CEST	443	49764	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.769123077 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.769159079 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.769172907 CEST	49765	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.769180059 CEST	443	49765	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.774096012 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.774132013 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.774149895 CEST	49763	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.774158955 CEST	443	49763	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.774425983 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.774467945 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.774513960 CEST	49766	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.774523020 CEST	443	49766	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.779263020 CEST	49744	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.779294014 CEST	443	49744	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.817387104 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.817424059 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.817471027 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.817500114 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.817533970 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.817554951 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.850229025 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.850255013 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.850289106 CEST	49762	443	192.168.2.10	184.28.90.27
Oct 24, 2024 00:50:41.850296021 CEST	443	49762	184.28.90.27	192.168.2.10
Oct 24, 2024 00:50:41.859095097 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.859138966 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.859318972 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.869483948 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.869539976 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.869860888 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.872349024 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.872395992 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.872790098 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.874275923 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.874319077 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.874644995 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.875416994 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.875452042 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.875688076 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.875719070 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.875797987 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.876847029 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.876863956 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.880319118 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.880351067 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.881134987 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.881165028 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.881373882 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:41.881391048 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:41.889055014 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.889085054 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.889153004 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.889208078 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.889228106 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.889275074 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.967751980 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.967788935 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.967899084 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:41.967927933 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:41.967976093 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.084458113 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.084486008 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.084544897 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.084573030 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.084597111 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.084616899 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.123574018 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.123599052 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.123668909 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.123692989 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.123743057 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.123769999 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.202223063 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.202266932 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.202341080 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.202373981 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.202388048 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.202413082 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.241041899 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.241067886 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.241117954 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.241154909 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.241180897 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.241199970 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.358083963 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.358104944 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.358218908 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.358242989 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.358283043 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.445586920 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.445610046 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.445696115 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.445715904 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.445768118 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.475769043 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.475795984 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.475837946 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.475851059 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.475903034 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.562829971 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.562855959 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.562902927 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.562913895 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.562963963 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.592892885 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.592919111 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.593000889 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.593008041 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.593050957 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.612833023 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.615502119 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.615516901 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.616286039 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.616291046 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.619146109 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.619599104 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.619611979 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.620246887 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.620261908 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.622863054 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.623549938 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.623558998 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.624248981 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.624253035 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.626313925 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.626723051 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.626734018 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.627804995 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.627809048 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.628576040 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.631058931 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.631079912 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.631678104 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.631684065 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.680098057 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.680120945 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.680203915 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.680212975 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.680254936 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.710107088 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.710124016 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.710185051 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.710191965 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.710226059 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.747503042 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.747769117 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.747822046 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.747904062 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.747926950 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.747941017 CEST	49775	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.747947931 CEST	443	49775	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.753873110 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.753931999 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.754153967 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.756505013 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.756542921 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.756666899 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.757369041 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.757392883 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.757416964 CEST	49774	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.757424116 CEST	443	49774	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.762190104 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.762207031 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.762476921 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.762551069 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.762638092 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.762646914 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.762684107 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.762726068 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.762736082 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763001919 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.763009071 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763078928 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763163090 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.763178110 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763267994 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763381958 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.763525009 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.763525009 CEST	49772	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.763530970 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.763540030 CEST	443	49772	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.765124083 CEST	49771	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.765134096 CEST	443	49771	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.765271902 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.765294075 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.765311003 CEST	49773	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.765317917 CEST	443	49773	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.797384024 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.797406912 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.797466993 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.797475100 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.797512054 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.808971882 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.809021950 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.809144020 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.810090065 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.810106993 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.810172081 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.810755014 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.810770035 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.811064959 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.811073065 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.814169884 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.814212084 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.814270973 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.814405918 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:42.814424992 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:42.827625036 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.827651978 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.827691078 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.827697039 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.827761889 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.914556026 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.914588928 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.914648056 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.914665937 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.914716959 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.946768045 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.946804047 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.946902037 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:42.946924925 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:42.946973085 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.031661034 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.031692028 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.031755924 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.031769991 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.031799078 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.031817913 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.064368010 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064400911 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064454079 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.064467907 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064522028 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.064707994 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064729929 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064764023 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.064770937 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.064795017 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.064815044 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181116104 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181149006 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181200027 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181215048 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181245089 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181263924 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181833982 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181854963 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181894064 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181900024 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.181925058 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.181941986 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.266448021 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.266480923 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.266527891 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.266544104 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.266577005 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.266596079 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.298731089 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.298758984 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.298814058 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.298827887 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.298866034 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.298886061 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.299468040 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.299494982 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.299546957 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.299552917 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.299580097 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.299602032 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.415617943 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415640116 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415704012 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.415731907 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415831089 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.415878057 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415919065 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415951967 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.415960073 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.415976048 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.416018963 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.498588085 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:43.505428076 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:43.548327923 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:43.549760103 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:43.549803019 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:43.559509993 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:43.566427946 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:43.591662884 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:43.603488922 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:43.606390953 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:43.643933058 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:43.643979073 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:43.644052982 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:43.644639969 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:43.644680023 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:43.644743919 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:43.645108938 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.645144939 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.645239115 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.646111012 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:43.646158934 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:43.646229982 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:43.651000977 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.651037931 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.651185036 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.652673006 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.652709007 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.652807951 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.653117895 CEST	49759	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.653141022 CEST	443	49759	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.667372942 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:43.667396069 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:43.667941093 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:43.667953968 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:43.668314934 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.668345928 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.668839931 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:43.668864012 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:43.670224905 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.670257092 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.670794010 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:43.670830011 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:43.679137945 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:43.679172039 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:43.679371119 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:43.679636002 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:43.679649115 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.275912046 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.324991941 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.381138086 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.381165028 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.382093906 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.382102013 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.382556915 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.382579088 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.383286953 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.383292913 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.384232998 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.384257078 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.384993076 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.385004044 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.390250921 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.390269995 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.390292883 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.391182899 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.391192913 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.391480923 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.391500950 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.395091057 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.395101070 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.399945021 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.399996996 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.400084019 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.407285929 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.407334089 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.407440901 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.408900023 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.408938885 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.409090042 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.409570932 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.409631968 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.414678097 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.414688110 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.414803982 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.414813995 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.415196896 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.415916920 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.415932894 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.416101933 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.416275024 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.416737080 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.416760921 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.417256117 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.417279005 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.417743921 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.417759895 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.418109894 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.418135881 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.418292999 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.419238091 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.419321060 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.419579029 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.419661045 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.420795918 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.420931101 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.421266079 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.421372890 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.421961069 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.422060966 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.422730923 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.422959089 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.423054934 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.424006939 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.424021006 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.424043894 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.424066067 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.424303055 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.424324036 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.424684048 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.426470995 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.426547050 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.433388948 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.463336945 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.463347912 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.473143101 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.473198891 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.475344896 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.495479107 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.495534897 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.495620012 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.495867968 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.495886087 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.508857965 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.508955956 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.509018898 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.509658098 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.509658098 CEST	49776	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.509677887 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.509690046 CEST	443	49776	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.510229111 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.510305882 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.510400057 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.511718035 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.512234926 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.512307882 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.514759064 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.514803886 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.514880896 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.515217066 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.515235901 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.515249968 CEST	49779	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.515255928 CEST	443	49779	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.517455101 CEST	49777	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.517460108 CEST	443	49777	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.518984079 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.519224882 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.519279003 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.520586014 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.521642923 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.521663904 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.522355080 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.522375107 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.522741079 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.522828102 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.523411989 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.523430109 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.523474932 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.523502111 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.523519993 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.523961067 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.523976088 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.524521112 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.524543047 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.524590015 CEST	49780	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.524596930 CEST	443	49780	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.530631065 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.530726910 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.530949116 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.532037973 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.532066107 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.532206059 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.532237053 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.532273054 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.532516003 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.532527924 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.534595966 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.534621000 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.534696102 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.535146952 CEST	49778	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.535161018 CEST	443	49778	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.544989109 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.545011044 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.545154095 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.545432091 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.545443058 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.545902014 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:44.545917988 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:44.549552917 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.549834013 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.549843073 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.550246000 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.550316095 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.550986052 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.551054955 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.563453913 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.563496113 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.563527107 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.563556910 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.563678026 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.563678026 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.563709974 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.564172029 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.564217091 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.564224958 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.564587116 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.564794064 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.564800024 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.567336082 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.604787111 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.604952097 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.605353117 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.605382919 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.611339092 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.611358881 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.621306896 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.621417046 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.630301952 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.630362034 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.630438089 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.630485058 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.635129929 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.657969952 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.658035994 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.676500082 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.676500082 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.676501989 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.676512003 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.676516056 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.676532984 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.680154085 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680285931 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680439949 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680495977 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.680520058 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680558920 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680598974 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.680608034 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.680646896 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.681176901 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.681237936 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.681307077 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.681317091 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.681845903 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.681901932 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.681910992 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.720442057 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.720523119 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.736171007 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.739857912 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.739867926 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.739922047 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.739938974 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.739964008 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.739990950 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.740006924 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.740016937 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.740608931 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.740679026 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.740686893 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741120100 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741173983 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.741178989 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741247892 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741261959 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741261959 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.741277933 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741285086 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741307974 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.741322994 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741328955 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.741345882 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.741359949 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.742043018 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.742094040 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.742189884 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.742197037 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749165058 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749185085 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749207973 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749226093 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749243021 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.749268055 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749337912 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.749344110 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749407053 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.749715090 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749746084 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749762058 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.749767065 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.749805927 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.760361910 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760380030 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760417938 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760445118 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760459900 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760484934 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.760499001 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760516882 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.760516882 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.760519028 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.760603905 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.781120062 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.781172037 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.781307936 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.781325102 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.784037113 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.784967899 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.785043001 CEST	443	49784	142.250.186.132	192.168.2.10
Oct 24, 2024 00:50:44.785195112 CEST	49784	443	192.168.2.10	142.250.186.132
Oct 24, 2024 00:50:44.800797939 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.800846100 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.800877094 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.800924063 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.800940990 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.800995111 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.800997019 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.801095963 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.801352024 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.802547932 CEST	49781	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:44.802561998 CEST	443	49781	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:44.808944941 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:44.808990955 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:44.809309959 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:44.813038111 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:44.813055992 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:44.836826086 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:44.836869001 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:44.836965084 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:44.839840889 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:44.839869022 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:44.859810114 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.859826088 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.859867096 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.859891891 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.859921932 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.859951973 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.859970093 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.861763000 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861774921 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861793041 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861802101 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861819983 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.861840963 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861855984 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.861875057 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.861887932 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.861907959 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.869199038 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.869235039 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.869287014 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.869309902 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.869333982 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.869352102 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.876302958 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.876317978 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.876362085 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.876379013 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.876477957 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.876478910 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.876497030 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.876574993 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.877388000 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.877445936 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.877460957 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.877487898 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:44.877540112 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.888931036 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.888976097 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.889231920 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.889631033 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.889650106 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.902594090 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.902740002 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.915503979 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.915553093 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.915626049 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.915662050 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.915724993 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.916280031 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.916344881 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.924673080 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.924766064 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.934361935 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:44.934427977 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:44.977319002 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.977395058 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.977663040 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.977719069 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.980575085 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.980587959 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.980634928 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.980691910 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.980701923 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.980952024 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.981002092 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.981008053 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.991766930 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.991868019 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.991904974 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.991935015 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:44.991990089 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:44.994735003 CEST	49782	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:44.994769096 CEST	443	49782	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:45.023933887 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.033458948 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.033509970 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.033538103 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.033540964 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.033567905 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.033591986 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.033613920 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.039578915 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.039635897 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.039731026 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.040168047 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.040183067 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.040926933 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.041742086 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.041764021 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.042887926 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.042965889 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.045309067 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.045424938 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.045829058 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.045839071 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.048070908 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.048110008 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.048182964 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.048202991 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.048248053 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.052258968 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.052323103 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.061359882 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.061428070 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.086440086 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.096396923 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.096425056 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.096486092 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.096501112 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.096554041 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.100646019 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.100656986 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.100692987 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.100708008 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.100728035 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.100748062 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.100771904 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.100792885 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.106890917 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.107002974 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.107004881 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.107033968 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.107069969 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.107090950 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.133641958 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.133970022 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.133984089 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.135055065 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.135121107 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.135530949 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.135601997 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.135772943 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.135782003 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.142771959 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.142975092 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.143002033 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.144006014 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.144093990 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.144479990 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.144542933 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.144725084 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.144735098 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.146893978 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.146991014 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.147022963 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.147036076 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.147059917 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.147090912 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.147129059 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.147186995 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.153367996 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.153424025 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.162739038 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.167558908 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.167615891 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.167624950 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.177570105 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.178112984 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.178127050 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.178158998 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.178169012 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.178181887 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.178210020 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.186126947 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.186189890 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.186223030 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.186279058 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.186307907 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.186326027 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.189826012 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.189960003 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.189984083 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.190007925 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.190038919 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.190078974 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.190124989 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.190489054 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.190530062 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.190541029 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.191144943 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.191186905 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.191196918 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.192703009 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.216991901 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.217025995 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.217080116 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.217108011 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.217133045 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.217149019 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.220246077 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.220519066 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.220550060 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.220726013 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.220750093 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.220804930 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.220820904 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.220860004 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.220879078 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.220927954 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.221304893 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.221410036 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.221585035 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.223079920 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.223100901 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.238204956 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.238224983 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.252510071 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.253428936 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.253459930 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.254287958 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.254296064 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.262805939 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.262835026 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.262860060 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.262887001 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.262924910 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.262938976 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.263189077 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.267329931 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.267734051 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.267755985 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.268366098 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.268372059 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.272772074 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.273670912 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.273696899 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.274272919 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.274279118 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.278539896 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.278633118 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.278656960 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.283370018 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.283420086 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.283428907 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.284742117 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.291107893 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.291634083 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.291651011 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.292567015 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.292592049 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.292598009 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.293550014 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.293581009 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.293612003 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.293653011 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.293664932 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.293673038 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.293729067 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.293940067 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.295106888 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.295118093 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.305327892 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.305402994 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.305430889 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.305440903 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.305483103 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.309102058 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309168100 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309206009 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.309214115 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309226036 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309274912 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.309700966 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309762955 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.309801102 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.309811115 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310476065 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310512066 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.310519934 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310760975 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310792923 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310816050 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.310823917 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.310863018 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.311325073 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.311393976 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.311424017 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.311430931 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.311438084 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.311471939 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.311477900 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.333461046 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.333487988 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.333527088 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.333551884 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.333570004 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.333594084 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.339365005 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.339410067 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.339431047 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.339492083 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.339518070 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.339565039 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.344144106 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.344163895 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.344223022 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.344254971 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.347112894 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.347191095 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.347208023 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.347238064 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.347259998 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.347285986 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.349114895 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.365241051 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.378732920 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.378855944 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.378928900 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.378935099 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.378988981 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.379046917 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.381337881 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.381361961 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.387134075 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.387192965 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.387207985 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.387233973 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.387260914 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.387296915 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.387342930 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.387593985 CEST	49796	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.387618065 CEST	443	49796	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.387648106 CEST	49790	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.387665987 CEST	443	49790	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.391657114 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.391704082 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.391767025 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.392010927 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.392024994 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.392502069 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.392528057 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.392570019 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.392581940 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.392605066 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.392621040 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.394411087 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.399184942 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.399224997 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.399235964 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.399255991 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.399292946 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.403011084 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.403232098 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.403300047 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.403345108 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.403345108 CEST	49798	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.403362989 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.403373957 CEST	443	49798	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.405930042 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.405961990 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.406033039 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.406155109 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.406164885 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.409445047 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.409523010 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.409554005 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.409564972 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.409574986 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.409612894 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.409621954 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.409686089 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.409730911 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.409823895 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.410221100 CEST	49797	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.410237074 CEST	443	49797	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.412843943 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.412885904 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.412955999 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.413129091 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.413142920 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.428945065 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429058075 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429090977 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429115057 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.429143906 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429191113 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.429234982 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.429438114 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429665089 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.429750919 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429781914 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429807901 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.429815054 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.429831982 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.429860115 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.429898977 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.429934025 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.429934025 CEST	49799	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.429950953 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.429965973 CEST	443	49799	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.430069923 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.430295944 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.430334091 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.430341959 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.430875063 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.430908918 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.430926085 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.430932045 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.431519032 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.431566954 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.431574106 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.431834936 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.431895018 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.431931019 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.431948900 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.431960106 CEST	49800	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.431966066 CEST	443	49800	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.434314966 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434365988 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.434422970 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434567928 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434586048 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.434633970 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434659004 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.434844971 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434844971 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:45.434892893 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:45.439378977 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.439621925 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.439635038 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.440696001 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.440788984 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.441225052 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.441293001 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.441394091 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.441401958 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.454814911 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.454832077 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.454869986 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.454888105 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.454898119 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.454902887 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.454951048 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.455374956 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.455426931 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.455950975 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.455982924 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.456005096 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.456015110 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.456044912 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.456053972 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.456094027 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.456361055 CEST	49791	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.456374884 CEST	443	49791	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.459026098 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.459055901 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.459089994 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.459115028 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.459177017 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.459177017 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.461852074 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.465497017 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.465523958 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.465574980 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.465593100 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.465639114 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.477933884 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.494013071 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.496017933 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.496047974 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.496104002 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.496114969 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.496130943 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.496145964 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.496182919 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.496195078 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.496215105 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.496223927 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.496242046 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.496278048 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.505929947 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.505958080 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.506002903 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.506027937 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.506062031 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.506084919 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.510484934 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.510528088 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.510569096 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.510593891 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525576115 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525612116 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525629997 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.525643110 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525676012 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525680065 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.525684118 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.525733948 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.525790930 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.526036978 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.526074886 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.526078939 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.526541948 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.526597023 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.526707888 CEST	49789	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.526721954 CEST	443	49789	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.537635088 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.537658930 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.537686110 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.537718058 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.537739992 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.537755966 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.538086891 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.538142920 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.538151026 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.538197041 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.548626900 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.548640013 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.548698902 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.548814058 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.548820972 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.548856974 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.548875093 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.548886061 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.549388885 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.549434900 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.549449921 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.549494982 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.549940109 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.549993992 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.550282001 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.550333023 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.550345898 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.550362110 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.550405979 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.550487995 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.550503016 CEST	443	49792	104.18.11.207	192.168.2.10
Oct 24, 2024 00:50:45.550513983 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.550556898 CEST	49792	443	192.168.2.10	104.18.11.207
Oct 24, 2024 00:50:45.571944952 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.571965933 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.572453976 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.572483063 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.572547913 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.580115080 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.580149889 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.580199003 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.580224991 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.580269098 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.580291033 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.584609985 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.584639072 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.584683895 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.584706068 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.584723949 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.584742069 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.591888905 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.591945887 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.591980934 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.591985941 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.592005014 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.592044115 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.592048883 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.592061043 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.592104912 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.592542887 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.592703104 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.592829943 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.592839956 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.631089926 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.631330967 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.631357908 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.632458925 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.632539034 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.632906914 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.632991076 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.633121014 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.633131027 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.636140108 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.636153936 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.654727936 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.654778004 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.654825926 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.654850960 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.654869080 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.654869080 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.654895067 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.654901981 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.654954910 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.654983997 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.655035019 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.656471968 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.656526089 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.669969082 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.670221090 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.670238018 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.671623945 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.671686888 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.672018051 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.672122955 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.672151089 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.683432102 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.683454037 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.690011978 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.690045118 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.690094948 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.690115929 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.690131903 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.690151930 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.699065924 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.699105024 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.699137926 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.699161053 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.699177980 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.699201107 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703129053 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703211069 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703216076 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703243017 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703284979 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703296900 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703517914 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703579903 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703586102 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703629971 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.703684092 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.703739882 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.704009056 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.704021931 CEST	443	49786	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.704037905 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.704061985 CEST	49786	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.707025051 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.707197905 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.707243919 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.707252979 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.707264900 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.707324982 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.707339048 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.708189964 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.708226919 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.708236933 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.708254099 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.708290100 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.708297968 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.716090918 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.716110945 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.754852057 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.754914045 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.754931927 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.756894112 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.771897078 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.771924973 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.771976948 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.772006035 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.772022963 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.772042990 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.798674107 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.808634043 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808656931 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808721066 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808727980 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.808737040 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808754921 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808805943 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.808830976 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.808850050 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.808876038 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.809969902 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.810013056 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.810039997 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.810046911 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.810061932 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.810075998 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.810111046 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.810543060 CEST	49783	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.810556889 CEST	443	49783	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.818267107 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.818290949 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.818336964 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.818345070 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.818382978 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.822288990 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822515011 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822546959 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822565079 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.822581053 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822623014 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.822838068 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822935104 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.822978973 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.823050976 CEST	49804	443	192.168.2.10	104.18.10.207
Oct 24, 2024 00:50:45.823064089 CEST	443	49804	104.18.10.207	192.168.2.10
Oct 24, 2024 00:50:45.865014076 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.865036964 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.865092039 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.865115881 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.865133047 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.865204096 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.890278101 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.890309095 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.890356064 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.890381098 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.890398026 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.890419006 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.892349005 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.916462898 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.916471958 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.916949034 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.920151949 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.920248032 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.924086094 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:45.924123049 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:45.924186945 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:45.925188065 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:45.926444054 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:45.926460981 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:45.933530092 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.933583975 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.934195995 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:45.934221029 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:45.948376894 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.948414087 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.948544025 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.948544025 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.948568106 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.948842049 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.958753109 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.958784103 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.958796978 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.958822012 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.958846092 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.958914995 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.958945990 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.959093094 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.959093094 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.959733009 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:45.960817099 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:45.967330933 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:45.975071907 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:46.006122112 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.006149054 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.006344080 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.006366014 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.006547928 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.051527977 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.051553011 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.051611900 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.051631927 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.051664114 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.051688910 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.056495905 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:46.056566000 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:46.058916092 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:46.072526932 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.072547913 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.072820902 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.072839022 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.073261976 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.079030991 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.079035044 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.079066992 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.079073906 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.079761982 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.079780102 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.079817057 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.079817057 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.079863071 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.080570936 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.080591917 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.080809116 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.080821991 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.081072092 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.081089973 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.083658934 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.083695889 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.084076881 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.084093094 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.084511042 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.104701996 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:46.104701996 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:46.104731083 CEST	443	49803	142.250.186.68	192.168.2.10
Oct 24, 2024 00:50:46.105195045 CEST	49803	443	192.168.2.10	142.250.186.68
Oct 24, 2024 00:50:46.107533932 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.107553959 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.107624054 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.107645035 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.107697010 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.107697010 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.128036022 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.128057957 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.128180981 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.128201008 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.128534079 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.143357038 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.144958019 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.146358967 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.146373034 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.147535086 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.147538900 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.148833036 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.148866892 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.149730921 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.149741888 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.178741932 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.178783894 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.178838015 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.179872036 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.179898024 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.179944038 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.179968119 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.179987907 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.180001020 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.180013895 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.180023909 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.180046082 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.180054903 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.180089951 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.180422068 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.180428982 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.183934927 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.184068918 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.184077024 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.184875011 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.189130068 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.189168930 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.189246893 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.189254999 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.189280033 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.189460993 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.192645073 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.192821026 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.192828894 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.198538065 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.198596954 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.198632002 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.198646069 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.198668957 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.198888063 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.203263998 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.203476906 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.203485966 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.204127073 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.204127073 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.204142094 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.204149961 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.207745075 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.207745075 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.207779884 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.207797050 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.224261045 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.224286079 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.224389076 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.224406004 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.226321936 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.227304935 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.227334023 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.228049040 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.228058100 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.236746073 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.236805916 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.241560936 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.241584063 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.241677046 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.241677046 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.241693974 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.241852045 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.251806021 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.262444973 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.262482882 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.262742043 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.263231039 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.263242006 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.265580893 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.265611887 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.266706944 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.267745972 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.267760038 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.270441055 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.270453930 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.270664930 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.276853085 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.276858091 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.276863098 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.276879072 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.277019978 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.277991056 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.278006077 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.282783031 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.287427902 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.287451029 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.287668943 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.287677050 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.287826061 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.296614885 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.296984911 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.297044992 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.297178030 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.297185898 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.297205925 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.297669888 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.297697067 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.297698021 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.300126076 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.300132990 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.300707102 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.300767899 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.300832033 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.300837994 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.302829981 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.308214903 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.308235884 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.308468103 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.308532000 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.308538914 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.308614016 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.308693886 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.308701992 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.317172050 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.317189932 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.317226887 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.317323923 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.317323923 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.317333937 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.317512989 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.334794998 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.335185051 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.335347891 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.337253094 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.337404013 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.337939978 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.343799114 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.343872070 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.343892097 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.343907118 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.343966961 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.355221987 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.355236053 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.355262995 CEST	49810	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.355268002 CEST	443	49810	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.359535933 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:46.359565020 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:46.359760046 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:46.360807896 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:46.360819101 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:46.360930920 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.361460924 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.361485004 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.361546993 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.361555099 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.361588955 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.361601114 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.361624002 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.413661003 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.417102098 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417160034 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417246103 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.417258978 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417555094 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417586088 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417613983 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417638063 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.417654991 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.417963028 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.421480894 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.421895981 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.427153111 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.428967953 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.428989887 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.429095030 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.429095030 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.429101944 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.429385900 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.434091091 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.434254885 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.434271097 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.436902046 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.436935902 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.437027931 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.437028885 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.437062025 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.437489986 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.464060068 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.464097023 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.464178085 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.464179039 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.464198112 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.464401007 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.475308895 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.475346088 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.475480080 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.475480080 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.475493908 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.475584030 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.478725910 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.478751898 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.478770018 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.478837967 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.478843927 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.478847027 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.478853941 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.479496002 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.523509979 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.523538113 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.523667097 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.523667097 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.523689032 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.524439096 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.524806976 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.532027960 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.532141924 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.532234907 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.532248974 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.532732010 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.533343077 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.533350945 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.535768032 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.537122011 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.537130117 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.543715954 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.543929100 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.543942928 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.548718929 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.548743010 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.548866987 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.548866987 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.548894882 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.549294949 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.556246042 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.556274891 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.556454897 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.556483984 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.556551933 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.586498976 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.586519003 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.595858097 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.595891953 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.596007109 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.596007109 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.596038103 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.596055031 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.600920916 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.600922108 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.600950003 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.625514030 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.625536919 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.625735998 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.625754118 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.625844002 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.641927004 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.641952991 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.642107964 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.642127037 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.642148018 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.642184973 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.644594908 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.649666071 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.650015116 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.650048971 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.650077105 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.650194883 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.650194883 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.650222063 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.653284073 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.660623074 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.660664082 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.660698891 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.660713911 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.660902023 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.661319971 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.664194107 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.664203882 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.668452978 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.668560028 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.668634892 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.668634892 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.680566072 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.680605888 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.680792093 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.680792093 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.680815935 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.680946112 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.709357023 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.709414959 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.711014986 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.711042881 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.711117029 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.711124897 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.711138964 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.711153984 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.711177111 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.711199045 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.711199999 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.712722063 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.712753057 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.713468075 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.714221001 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.714292049 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:46.714550972 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.714570045 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.714600086 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:46.756012917 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.756037951 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.756186008 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.756186008 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.756196976 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.756685019 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.756875038 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.767355919 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.767616034 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.767847061 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.767894030 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.767914057 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.767940044 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.767987967 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.778109074 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.778165102 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.778762102 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.778808117 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.780895948 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.780941963 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.785666943 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.785706043 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.796631098 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.796658993 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.796833038 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.796864033 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.803642988 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.808429956 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:46.826478004 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.826505899 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.826688051 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.826688051 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.826715946 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.828826904 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.830259085 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.830286980 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.831829071 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.831882000 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.831897020 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.831921101 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.832194090 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.832231045 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.832823992 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.852832079 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:46.880832911 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.884845972 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.885500908 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.885598898 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.885623932 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.885760069 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.885760069 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.885771990 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.895596981 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.895699978 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.896442890 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.896476030 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.897031069 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.897039890 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.898091078 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.914835930 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.914864063 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.915030003 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.915056944 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.915085077 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.915112972 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.915143013 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.915143013 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.915169954 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.915199995 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.920823097 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.930419922 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.948129892 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.949116945 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.949145079 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.949222088 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.949249029 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.949289083 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.949301958 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.949322939 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.949342966 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.949352980 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.949378014 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.949515104 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.955502033 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.955543041 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:46.982887030 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.991163969 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.991183996 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.991257906 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.991290092 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.991302967 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.991400957 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:46.997769117 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:46.997997046 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:46.998063087 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.001667976 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.001698971 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.001841068 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.001872063 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.001921892 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.004319906 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.004380941 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.004415989 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.004523993 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.004554033 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.004626036 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.013187885 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014000893 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014012098 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.014038086 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014082909 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014117002 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014139891 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.014139891 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.014159918 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.014208078 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.014509916 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.028117895 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.037336111 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.037370920 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.037487984 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.037516117 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.037568092 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.044610977 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.044812918 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.060422897 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.060851097 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.064105988 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.065330982 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.065357924 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.065431118 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.065457106 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.065484047 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.065506935 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.066992998 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.067054033 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.067131042 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.067156076 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.067209005 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.076407909 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.082573891 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.107245922 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.107270002 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.107352018 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.107379913 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.107425928 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.121000051 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.121124029 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.121165037 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.121212006 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.121243000 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.121292114 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.126482010 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.130861044 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131562948 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131627083 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.131650925 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131783009 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131815910 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131839037 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.131846905 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.131889105 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.131962061 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.131962061 CEST	49812	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.131993055 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.132004023 CEST	443	49812	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.132101059 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.132137060 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.132153034 CEST	49809	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.132160902 CEST	443	49809	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.139244080 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.139261961 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.139271975 CEST	49813	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.139276981 CEST	443	49813	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.143445015 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.143445015 CEST	49811	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.143472910 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.143491983 CEST	443	49811	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.149483919 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.149507999 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.149580002 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.149597883 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.149657965 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.156178951 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.156212091 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.156254053 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.156276941 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.156301975 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.156321049 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.177603006 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.178277016 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:47.178301096 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:47.178925037 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.178950071 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.179022074 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.179035902 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.179224014 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.179236889 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.179330111 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.179336071 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.179470062 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.179480076 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.179505110 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:47.179542065 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.179552078 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.179575920 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:47.179646969 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.179663897 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.179804087 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.179919004 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.179929972 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.180094957 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.180097103 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.180218935 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.180270910 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.180284023 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.180326939 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.181355953 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.181493998 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.181566954 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.181905031 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.183032990 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.183104992 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.183844090 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.183865070 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.183907032 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.183913946 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.183963060 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.183969975 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.184024096 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.184940100 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.184981108 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.184983015 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.185014009 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.185060024 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.186028004 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.186553955 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.222209930 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.222213984 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.222213984 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.222321987 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.225486040 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.225513935 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.225558996 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.225578070 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.225604057 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.225631952 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.237828016 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.237989902 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.238593102 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.238809109 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.238842010 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.238874912 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.238888979 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.238902092 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.238982916 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.239007950 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.239016056 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.239553928 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.239594936 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.239608049 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.241158009 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.241189003 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.241238117 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.241265059 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.241282940 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.241307020 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.241697073 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.241863966 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.242511988 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.242635012 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.243422031 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.243561983 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.245619059 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.245750904 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.246695042 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.246834993 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.247522116 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.247808933 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.248620987 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.248693943 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.248718977 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.249459028 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.249505043 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.249517918 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.250348091 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:47.250488043 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:47.252182007 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.276520967 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.276547909 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.276590109 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.276606083 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.276655912 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.284596920 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.284615040 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.284615040 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.284635067 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.284677029 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.284703970 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.298619986 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.298619986 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.298635960 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.298640013 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.298645973 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:47.298649073 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.298650980 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.298655033 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.298665047 CEST	443	49814	216.58.206.86	192.168.2.10
Oct 24, 2024 00:50:47.299325943 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.299366951 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.299386024 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.299436092 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.299444914 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.299480915 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.299499035 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.299535990 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.299590111 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.299597979 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.299607038 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.299650908 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.301466942 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.301484108 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.301541090 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.301548004 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.301595926 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.302542925 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.336828947 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.336877108 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.342793941 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.342814922 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.342894077 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.342900038 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.342941046 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.342959881 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.352387905 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.352391958 CEST	49814	443	192.168.2.10	216.58.206.86
Oct 24, 2024 00:50:47.352869034 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.352869987 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.352880955 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356312037 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356347084 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356374025 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356384993 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.356394053 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356435061 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.356777906 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.356834888 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.357038975 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.367901087 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.367944002 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.367957115 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.367974043 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.368004084 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.368026018 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.368032932 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.368076086 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.372286081 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.372462988 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.372585058 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.372783899 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.373172045 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.373289108 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.373589993 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.374402046 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.387216091 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.394900084 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.394926071 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.394964933 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.394975901 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.395040989 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.399727106 CEST	49787	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.399760008 CEST	443	49787	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.408807039 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.416552067 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.416579008 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.416678905 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.416680098 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.416697025 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.416738987 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.417920113 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.417963028 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.417973995 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.417988062 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.418028116 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.418431044 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.418467045 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.418493032 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.418499947 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.418519974 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.418528080 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.418546915 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.418585062 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.419322968 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.419332027 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.419336081 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.419339895 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.419342995 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.419354916 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.419374943 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.420427084 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.472167969 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.472182989 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.473967075 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.474006891 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.474019051 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.474028111 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.474092007 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.474098921 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.474766970 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.474818945 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.474826097 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.479763031 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.479800940 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.479851007 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.479878902 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.479897022 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.479943037 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.485155106 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.485215902 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.485224009 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.485332012 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.485369921 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.485377073 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.514976978 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.515008926 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.515058041 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.515084028 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.515117884 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.515141010 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.526771069 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.526824951 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.526832104 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.526849985 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.526894093 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.526901960 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.535608053 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.535653114 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.535670042 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.535689116 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.535753012 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.538116932 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.572490931 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.572515011 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.572571039 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.572585106 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575212955 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575243950 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575252056 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575258970 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575270891 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575285912 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575289011 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.575310946 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575337887 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.575412989 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.575450897 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.575458050 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576059103 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576083899 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576128960 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.576143026 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576839924 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576855898 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.576910019 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.576917887 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577591896 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577604055 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577632904 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577651978 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.577667952 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577682018 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577689886 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.577728987 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.577960014 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577980995 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.577987909 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.578026056 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.578035116 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.581273079 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.581290960 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.583051920 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.591557980 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.591609955 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.591624022 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.591835022 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.591898918 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.591907024 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.592101097 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.592149019 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.592156887 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.599667072 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.599725962 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.599760056 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.599778891 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.599808931 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.599828005 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.602902889 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.602948904 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.602978945 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.602993965 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.603049040 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.613533020 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.621985912 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.622060061 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.622095108 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.622121096 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.622136116 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.622179031 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.622507095 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.625830889 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.625880003 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.625910044 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.625920057 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.625940084 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.625978947 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.625986099 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.627659082 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.627778053 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.627810955 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.627823114 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.627839088 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.627887011 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.627893925 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.629410028 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.629420042 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.629443884 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.630548000 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.630598068 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.630614996 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.635232925 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.635248899 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.635278940 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.635282993 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.635293961 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.635348082 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.635375023 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.635415077 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.636404991 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.636450052 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.636456966 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.639466047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.639524937 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.639540911 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.644001007 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.644042969 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.644061089 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.644376993 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.644447088 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.644489050 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.644507885 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.646420002 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.646441936 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.646469116 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.646475077 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.650979996 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.653127909 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.653187037 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.653187990 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.653202057 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.653245926 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.653879881 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.656270027 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.656320095 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.656326056 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.656339884 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.656384945 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.689483881 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.689496994 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.689527988 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.689541101 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.689583063 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.689661026 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.690201998 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.690212965 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.690262079 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.690270901 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.690282106 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.690316916 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.693259001 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693278074 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693298101 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693305969 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693339109 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.693345070 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693360090 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.693367958 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.693381071 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.693386078 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.693386078 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.693393946 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.693401098 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.693404913 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.693419933 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.694103003 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.694139957 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.694150925 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.694158077 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.694185019 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.697330952 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.697355986 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.697379112 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.697424889 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.697463036 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.697468042 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698569059 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698580027 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698623896 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698632002 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.698652029 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698669910 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.698734045 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.698777914 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.709290028 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709361076 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709392071 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709412098 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.709434032 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709489107 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.709604979 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709700108 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709770918 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.709779978 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.709877014 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709889889 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709919930 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709933043 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709948063 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.709950924 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709979057 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.709995031 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.710007906 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.710032940 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.713114023 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.713134050 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.713151932 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.713180065 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.713186026 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.713238001 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.713247061 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.713298082 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.720396042 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.720447063 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.720474958 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.735133886 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.735153913 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.735153913 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.735199928 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.737557888 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.737787962 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.737837076 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.737848043 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.738493919 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.738538027 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.738543987 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.742115974 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.742167950 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.742172956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.744360924 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.744899988 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.744950056 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.744956970 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.745330095 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.745374918 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.745382071 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.746606112 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.746655941 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.746663094 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.746882915 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.746932030 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.746936083 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.747550011 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.747950077 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.747996092 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.748004913 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.748718023 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.748758078 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.748764992 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.748955011 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.748995066 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.749002934 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.752165079 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.752213955 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.752219915 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.752695084 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.752720118 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.752762079 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.752774954 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.752803087 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.752830982 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.754014969 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.754061937 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.754077911 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.755110979 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.755156994 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.755172968 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.755173922 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.755189896 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.755239964 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.755249977 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.755291939 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.759198904 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.759251118 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.759277105 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.759309053 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.759318113 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.759345055 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.759361982 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.759390116 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.759404898 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.761322021 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.761375904 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.761388063 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.761969090 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.762026072 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.762046099 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.762121916 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.762168884 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.762176037 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.764162064 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.764210939 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.764225960 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.767105103 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.767153978 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.767225027 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.767915010 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.767963886 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.767980099 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.768244982 CEST	49795	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.768263102 CEST	443	49795	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.769213915 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.769243956 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.769484043 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.770320892 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.770366907 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.770380974 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.770653963 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.770703077 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.770711899 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.771526098 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.771575928 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.771584034 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.772049904 CEST	49822	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.772072077 CEST	443	49822	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.772674084 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.772725105 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.772736073 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.774007082 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.774048090 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.774064064 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.774072886 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.774122000 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.774131060 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.775716066 CEST	49823	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.775728941 CEST	443	49823	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.776619911 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.776668072 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.776681900 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.777062893 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.777096033 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.777265072 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.777312040 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.777333021 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.777496099 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.777508974 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.778934002 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.778983116 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.778996944 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.779814005 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.779846907 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.784276962 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.784296989 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.784414053 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:47.784432888 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:47.806442976 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.806454897 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.806490898 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.806502104 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.806512117 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.806524992 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.806562901 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.807318926 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.807368040 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.807377100 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.807387114 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.807425976 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.810933113 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.810951948 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.810970068 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.811011076 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.811033964 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.811059952 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.812868118 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.812900066 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.812925100 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.812932014 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.812983990 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.815119028 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.815133095 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.815169096 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.815448999 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.815469980 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.815509081 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.815517902 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.815557957 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.827255011 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827333927 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827380896 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827378988 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.827403069 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827439070 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.827444077 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827456951 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827506065 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.827513933 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.827584982 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.827593088 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.827660084 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.827673912 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.827724934 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.828577995 CEST	49825	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:47.828597069 CEST	443	49825	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:47.831126928 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.831141949 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.831176996 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.831192970 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.838326931 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.838381052 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.838392019 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.853054047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.853115082 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.853117943 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.853133917 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.853183031 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.853570938 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.857619047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.857657909 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.857686043 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.857700109 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.857748032 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.862679005 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.862735987 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.862787008 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.862812042 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.863133907 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 24, 2024 00:50:47.863219023 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.863253117 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.863280058 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.863280058 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.863295078 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.863339901 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.865422964 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.865469933 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.865484953 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.867624044 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.867672920 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.867686033 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.868328094 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.868359089 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.868371964 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.868379116 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.868427038 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.868987083 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.869365931 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.869393110 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.869409084 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.869424105 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.869465113 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.870634079 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.870707035 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.870718956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.871592045 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.871623993 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.871649027 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.871655941 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.871695042 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.872025013 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.872241020 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.872266054 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.872307062 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.872333050 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.872350931 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.872380018 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.872509956 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.875037909 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.875065088 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.875117064 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.875135899 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.875178099 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.878048897 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.878103971 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.878119946 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.879132986 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.879338026 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.879503012 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.879544973 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.879559994 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.881799936 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.881859064 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.881872892 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.882397890 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.882442951 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.882450104 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.888230085 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.888273001 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.888287067 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.888304949 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.888392925 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.888426065 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.888483047 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.888498068 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.889066935 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.890993118 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.891043901 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.891060114 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.891279936 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.891323090 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.891331911 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.891593933 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.891640902 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.891648054 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.892175913 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.892218113 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.892234087 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.894985914 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.895037889 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.895046949 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.897968054 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.898004055 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.898025990 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.898036957 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.898077965 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.929689884 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.929717064 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.929759979 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.929771900 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.929824114 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.930360079 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.930385113 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.930425882 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.930438995 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.930465937 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.930490971 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.931446075 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.931468964 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.931505919 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.931514025 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.931551933 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.932967901 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.933021069 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.933034897 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.934523106 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.942117929 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.942131996 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.942176104 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.948832035 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.948895931 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.948925972 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.948950052 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.948962927 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.949165106 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.949206114 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.949214935 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.949258089 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.955969095 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.968683004 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.968724966 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.968777895 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.968801022 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.968841076 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.969376087 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.972014904 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.972131968 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.972146988 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.973001003 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.973097086 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.973112106 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.974195957 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.978091002 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.978221893 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.978235960 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.981668949 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.981878042 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.981918097 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.981939077 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.984761953 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.984832048 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.984846115 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.985060930 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.985277891 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.985285997 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.986257076 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.986381054 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.986392975 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.987178087 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.987231970 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.987236023 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.987253904 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.987292051 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.987416029 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988008976 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988054991 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.988069057 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988405943 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988431931 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988578081 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.988593102 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988675117 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.988820076 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.988862991 CEST	443	49818	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.988914967 CEST	49818	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.991893053 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.991971016 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.991983891 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.992074013 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.992100000 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.992160082 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.992188931 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.992326975 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.994726896 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.994746923 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.994806051 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.994831085 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:47.994919062 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:47.996839046 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.996870041 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.996882915 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.996892929 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.996910095 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.996932030 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.996948957 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.997019053 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.997487068 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.997637033 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:47.997740984 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:47.997751951 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.004133940 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.004231930 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.004288912 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.004302979 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.004343033 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.005620956 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.005650043 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.005696058 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.005708933 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.005744934 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.008964062 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009022951 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009073973 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.009084940 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009558916 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009583950 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009624004 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009630919 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009632111 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.009641886 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.009665966 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.009690046 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.009705067 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.010605097 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.010667086 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.010674953 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.013725996 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.013762951 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.013832092 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.013842106 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.013899088 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.041510105 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.041549921 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.041646004 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.041675091 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.041726112 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.041743994 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.043108940 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.047856092 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.047882080 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.047971964 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.047996044 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.048042059 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.048827887 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.048856974 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.048899889 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.048927069 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.048944950 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.050297022 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.051569939 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.054116964 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.066513062 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.066570044 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.066618919 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.066644907 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.066915035 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.066945076 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.066961050 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.066971064 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.067011118 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.084142923 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.084230900 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.084249020 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.084644079 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.084707975 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.084718943 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.087591887 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.087651968 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.087666035 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.088537931 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.088608027 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.088622093 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.093614101 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.093730927 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.093745947 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.100369930 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.100409985 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.100445032 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.100466967 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.100507975 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.100682974 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.101742983 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.101794004 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.101808071 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.102857113 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.102907896 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.102921009 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.103812933 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.103857040 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.103869915 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.106987953 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.107034922 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.107047081 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.110553026 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.110622883 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.110632896 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.111692905 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.111716986 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.111780882 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.111818075 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.111887932 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.113899946 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.113918066 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.113970041 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.113986969 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.114034891 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.114398956 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.114495993 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.114538908 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.114552021 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.114811897 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.114855051 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.114861965 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.115699053 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.115757942 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.115767956 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.119307995 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.119425058 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.119436026 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.123292923 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.123472929 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.123482943 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.123642921 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.123713017 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.123729944 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.126616955 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.126715899 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.126724005 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.126993895 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.127022028 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.127063990 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.127088070 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.127096891 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.127341986 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.128035069 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.128074884 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.128300905 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.128309011 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.128629923 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.132440090 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.132483006 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.132802010 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.132812023 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.132895947 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.158598900 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.158716917 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.158746004 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.164026976 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164052963 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164130926 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.164160013 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164212942 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.164383888 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164411068 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164446115 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.164473057 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.164515018 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.164545059 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.165224075 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.165241003 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.165311098 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.165318966 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.165363073 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.166063070 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.166132927 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.166140079 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.166150093 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.166187048 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.166928053 CEST	49821	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.166945934 CEST	443	49821	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.170748949 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.173151970 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184225082 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184273958 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184305906 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184350014 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.184365988 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184385061 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.184396982 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.184433937 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.184638023 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.199704885 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.199796915 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.199877977 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.199923038 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.199923038 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.199943066 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.200175047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.200429916 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.200439930 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.204159975 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.204294920 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.204370022 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.204387903 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.204407930 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.204457045 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.205282927 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.205368996 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.209121943 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.213299036 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.213325977 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.217206001 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.217299938 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.217317104 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.221512079 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.221549988 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.221656084 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.221669912 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.221688032 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.221704006 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.222084999 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.222134113 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.222157955 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.222620010 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.222812891 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.222824097 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.225622892 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.225822926 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.225846052 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.226016998 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.226074934 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.226094007 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.229456902 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.229470968 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.231251001 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.231276989 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.231442928 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.231471062 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.231831074 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.232211113 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232263088 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232316017 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.232323885 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232462883 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232649088 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.232656956 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232796907 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.232809067 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232877016 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.232892036 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.232908964 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.233006954 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.233006954 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.233016968 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.233150959 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.233376026 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.234143019 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.234232903 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.234257936 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.234915972 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.235385895 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.235404015 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.242933989 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.243061066 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.243087053 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.251054049 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.251256943 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.251287937 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.274823904 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.275006056 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.275022984 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.276633024 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.276662111 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.276746035 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.276746035 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.276762962 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.276859045 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.278738976 CEST	49806	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.278760910 CEST	443	49806	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.281213999 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.281233072 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.281316996 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.281335115 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.281450987 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.289442062 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.289479017 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.289530993 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.289550066 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.289807081 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.289952993 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.315335989 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.316446066 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.316687107 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.316765070 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.316782951 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.317404985 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.317426920 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.317477942 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.317491055 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.317519903 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.317533970 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.320735931 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.320816040 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.320827007 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.320854902 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.320983887 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.320997953 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.321835041 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.321918964 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.321995974 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.322014093 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.322067976 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.322877884 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.344041109 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.349670887 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.349788904 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.349792957 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.349824905 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.349996090 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350121021 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.350137949 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350157022 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350188017 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.350223064 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350306988 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350339890 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350349903 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.350373030 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350390911 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.350630999 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.350996971 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.351030111 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.351049900 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.351089954 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.351104975 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.351114988 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.351121902 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.351183891 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.352319002 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.352382898 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.352674961 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.352689028 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.358999968 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.359020948 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.359230042 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.359256029 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.359392881 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.359462023 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.359750986 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.359776020 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.361365080 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.361433983 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.361449957 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.370060921 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.372936964 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.372963905 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.386888027 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.386914015 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.387042999 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.387042999 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.387073040 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.387384892 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.390253067 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.390466928 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.390484095 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.393946886 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.393975973 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.394056082 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.394071102 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.394084930 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.394129038 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.396822929 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.396872044 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.397563934 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.397563934 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.397608042 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.399265051 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.399291039 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.399347067 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.399364948 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.399380922 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.399430990 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.399440050 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.399440050 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.399519920 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.400115967 CEST	49820	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.400139093 CEST	443	49820	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.404958010 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.405008078 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.405208111 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.405476093 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.405489922 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.408195019 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.408236027 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.408267021 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.408274889 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.408293962 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.408399105 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.408586025 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.408631086 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.408740044 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.408817053 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.408832073 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.409040928 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.409156084 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.409194946 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.409251928 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.409414053 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.409429073 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.409594059 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.409604073 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.409735918 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.409751892 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.431932926 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.431973934 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.432002068 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.432009935 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.432101011 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.432621956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.436877012 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.436923027 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.436935902 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.436949968 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.436984062 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.437028885 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.437037945 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.437097073 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.437402964 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.456387043 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.457767963 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.457825899 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.457916975 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.458161116 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.458173990 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.465496063 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.465539932 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.465573072 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.465607882 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.465625048 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.465642929 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.466243982 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.466279030 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.466310978 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.466321945 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.466542006 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.467051983 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.467854977 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.467900038 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.467981100 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.468373060 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.468381882 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.468759060 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.468822002 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.469064951 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.469086885 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.469535112 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.469575882 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.469597101 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.469609022 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.469783068 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.469790936 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.470463991 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.470473051 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.470484972 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.470508099 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.470671892 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.470699072 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.470736980 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.470743895 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.470802069 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.470803022 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.471236944 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.472013950 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.472078085 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.472088099 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.476176977 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.476206064 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.476320028 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.477508068 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.477533102 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.477617025 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.477623940 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.477669954 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.477669954 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.477729082 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.477741003 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.480185986 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.480258942 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.480274916 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.483159065 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.483207941 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.483342886 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.485073090 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:48.485096931 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:48.485986948 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.486023903 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.486088037 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.486422062 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.486438990 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.488873959 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.488987923 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.489015102 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.504806042 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.505794048 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.505891085 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.505908012 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.507522106 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.507558107 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.507648945 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.508219957 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.508240938 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.509243965 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.509295940 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.509746075 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.509751081 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.511904001 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.512825012 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.512865067 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.513407946 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.513413906 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.526340008 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.527228117 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.527259111 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.527282000 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.527318954 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.527379036 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.527993917 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.533128977 CEST	49849	443	192.168.2.10	18.198.218.82
Oct 24, 2024 00:50:48.533169985 CEST	443	49849	18.198.218.82	192.168.2.10
Oct 24, 2024 00:50:48.533263922 CEST	49849	443	192.168.2.10	18.198.218.82
Oct 24, 2024 00:50:48.533679962 CEST	49849	443	192.168.2.10	18.198.218.82
Oct 24, 2024 00:50:48.533696890 CEST	443	49849	18.198.218.82	192.168.2.10
Oct 24, 2024 00:50:48.534810066 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.537292004 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.537307024 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.537688971 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.538917065 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.538928032 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.547614098 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.547729969 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.547746897 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.547857046 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.547931910 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.547940016 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552006960 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552124023 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552202940 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.552212954 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552242041 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552301884 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.552320004 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.552397966 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.552887917 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.553035021 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.553098917 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.553128004 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.557085991 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.557106972 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.557168007 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.557192087 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.557224989 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.557497978 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.571472883 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.571494102 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.571971893 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.571993113 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.572376013 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.572396994 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.572419882 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.572426081 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.580698013 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.580815077 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.580869913 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.580887079 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.580948114 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.580955029 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.581372976 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.581456900 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.581513882 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.581521988 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.581584930 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.581809998 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.581816912 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.581938982 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.582377911 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.582520962 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.582526922 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.587548018 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.587719917 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.587722063 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.587735891 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.587811947 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.587824106 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.587872028 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.588473082 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.589229107 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.589251995 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.589294910 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.589307070 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.589322090 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.589337111 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.590034008 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.590066910 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.590101004 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.590111017 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.590188026 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.590524912 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.590560913 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.590636015 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.590645075 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.590658903 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.590671062 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.590733051 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.597306967 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.597336054 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.597451925 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.597451925 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.597460985 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.597568989 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.607606888 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.607651949 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.607681990 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.607706070 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.607788086 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.621670008 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.621756077 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.621774912 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.636415958 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.636759043 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.636825085 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.637032032 CEST	49851	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.637082100 CEST	443	49851	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.637243986 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.637264013 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.637290955 CEST	49851	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.637301922 CEST	49830	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.637307882 CEST	443	49830	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.637830019 CEST	49851	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.637852907 CEST	443	49851	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.640548944 CEST	49852	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.640578032 CEST	443	49852	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.640814066 CEST	49852	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.641067982 CEST	49852	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.641087055 CEST	443	49852	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.646152973 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.646294117 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.646326065 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.646358967 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.646373034 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.646387100 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.646446943 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.646455050 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.646961927 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.647105932 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.649564981 CEST	49826	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.649596930 CEST	443	49826	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.656567097 CEST	49854	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.656610012 CEST	443	49854	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.656764984 CEST	49854	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.657130003 CEST	49854	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.657143116 CEST	443	49854	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.663443089 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.663506985 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.663515091 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.663702965 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.663769007 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.663775921 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.666122913 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.666198015 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.666241884 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.666975975 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.666975975 CEST	49829	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.666999102 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.667010069 CEST	443	49829	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.667984009 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668061018 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668144941 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.668152094 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668210030 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.668642998 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668783903 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668858051 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.668872118 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.668878078 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.669097900 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.671612024 CEST	49856	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.671650887 CEST	443	49856	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.671801090 CEST	49856	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.671930075 CEST	49856	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.671950102 CEST	443	49856	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.676656008 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.676701069 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.676758051 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.676789999 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.676816940 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.677648067 CEST	49805	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:48.677663088 CEST	443	49805	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:48.690864086 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.690874100 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.695957899 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.696041107 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.696079016 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.696114063 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.696130037 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.696140051 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.696191072 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.696914911 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.697297096 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.697302103 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.697803020 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.697880030 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.697886944 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.701205015 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.701342106 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.701423883 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.701648951 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.701667070 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.701695919 CEST	49828	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.701700926 CEST	443	49828	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.706186056 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706273079 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706372976 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.706382036 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706480026 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.706547976 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.706566095 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706624985 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706708908 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.706722975 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.706907034 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.707256079 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.707391024 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.707425117 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.707456112 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.707499981 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.707499981 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.707509995 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.707719088 CEST	49858	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.707742929 CEST	443	49858	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.707818985 CEST	49858	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.708149910 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.708149910 CEST	49827	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.708163023 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.708170891 CEST	443	49827	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.708270073 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.708303928 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.708493948 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.708503008 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.708561897 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.709007978 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.717514038 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.719579935 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.719592094 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.726350069 CEST	49858	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.726381063 CEST	443	49858	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.727072954 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.728322029 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.728339911 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.731359959 CEST	49859	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.731421947 CEST	443	49859	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.732263088 CEST	49859	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.732263088 CEST	49859	443	192.168.2.10	13.107.246.45
Oct 24, 2024 00:50:48.732307911 CEST	443	49859	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:48.736639023 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:48.736700058 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:48.736787081 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:48.737222910 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.737262011 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.737312078 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.737323999 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.738548040 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.738553047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.741005898 CEST	49738	443	192.168.2.10	142.250.185.132
Oct 24, 2024 00:50:48.741019011 CEST	443	49738	142.250.185.132	192.168.2.10
Oct 24, 2024 00:50:48.764836073 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.765063047 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.765075922 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.765223980 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.765393972 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.765402079 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.778750896 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.778784990 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.778821945 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.778842926 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.778933048 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.778959990 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783432961 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783617973 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.783627033 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783804893 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783837080 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783854961 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.783859015 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.783870935 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.784015894 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.810153008 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.810240030 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.810264111 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.811358929 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.811474085 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.811482906 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.811778069 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.811887980 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.811898947 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.812305927 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.812747002 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.812753916 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.812910080 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.812952042 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.812961102 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.813482046 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.813518047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.813930035 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.813942909 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.814073086 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.825014114 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825189114 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.825202942 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825313091 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825339079 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825377941 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.825396061 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825479984 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.825810909 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825854063 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.825963020 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.825974941 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.826577902 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.826601982 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.826765060 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.826776028 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.826793909 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.827080965 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.827421904 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.827483892 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.827559948 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.827569962 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.827683926 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.836039066 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.845696926 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.845757961 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.845787048 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.845798969 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.846014977 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.852758884 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.852917910 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.852965117 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.853070974 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.853080034 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.853435993 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.883687973 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.883861065 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.883896112 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.883904934 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.883924961 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.884124994 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.894365072 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.898808956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.898955107 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899015903 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899094105 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.899102926 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899359941 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.899672031 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899705887 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899744987 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899749994 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.899755955 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.899812937 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.900978088 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.901132107 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.901140928 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927356005 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927396059 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927436113 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927470922 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927521944 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.927521944 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.927536011 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.927611113 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.927854061 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.928344011 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.928385973 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.928433895 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.928440094 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.928560019 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.928854942 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.928956032 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.947747946 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.947797060 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.947824001 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.947834969 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.947849035 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948174000 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948205948 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948229074 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.948229074 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.948239088 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948271990 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948302031 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.948338985 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.948338985 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.948344946 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.949177980 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.949206114 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.949484110 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.949492931 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.949985027 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.950014114 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.950036049 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.950062037 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.950071096 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.950134993 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.950134993 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.955235004 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.964937925 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.964983940 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.965045929 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.965056896 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.965107918 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.968533039 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.968594074 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.968626022 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.968660116 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.968667984 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.968667984 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:48.968674898 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:48.968818903 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.003328085 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.003400087 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.003429890 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.003487110 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.003509998 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.003566027 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.010051966 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.014698982 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.014745951 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.014775038 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.014779091 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.014934063 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.014981985 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.014993906 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.015125990 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.015175104 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.015201092 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.015268087 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.015281916 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.015326023 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.024804115 CEST	49672	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:49.025505066 CEST	49862	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:49.025559902 CEST	443	49862	173.222.162.55	192.168.2.10
Oct 24, 2024 00:50:49.025640965 CEST	49862	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:49.025893927 CEST	49862	443	192.168.2.10	173.222.162.55
Oct 24, 2024 00:50:49.025907993 CEST	443	49862	173.222.162.55	192.168.2.10
Oct 24, 2024 00:50:49.042341948 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.042742014 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.042785883 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.042809010 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.042824030 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.042905092 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.043153048 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.043214083 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.043412924 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.043423891 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.043695927 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.043771982 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.043778896 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.044203997 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.044265985 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.044275045 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.044701099 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.044751883 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.044768095 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.047821045 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.062905073 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.062998056 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063019037 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.063025951 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063060999 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063076019 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.063594103 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063734055 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.063746929 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063894987 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063926935 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063951969 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.063955069 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.063966990 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.064006090 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.064456940 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.064522982 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.064560890 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.066416025 CEST	49819	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.066433907 CEST	443	49819	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.084074020 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.084115982 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.084186077 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.084203005 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.084254026 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.084275007 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.084280968 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.086930037 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.125277996 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.127526045 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.127715111 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.127732038 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.128097057 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.128827095 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.128900051 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.129436970 CEST	49836	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.130084038 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130121946 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130136967 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.130146027 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130187988 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.130245924 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130656958 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130765915 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.130772114 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.130976915 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.131011009 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.131037951 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.131042957 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.131077051 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.132458925 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.132659912 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.132679939 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.134006023 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.134083986 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.134654999 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.134783983 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.134917021 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.135144949 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.135155916 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.135324955 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.135343075 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.135804892 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.136342049 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.136430025 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.136439085 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.136468887 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.136832952 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.136847973 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.137192965 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.137479067 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.137537956 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.137675047 CEST	49835	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.142002106 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.142240047 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.142261982 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.143290043 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.143363953 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.144171000 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.144229889 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.144294024 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.144305944 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.158266068 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.158345938 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.158396006 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.158404112 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.158452988 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.158492088 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.158497095 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159020901 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159070015 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.159074068 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159516096 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159560919 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.159565926 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159734011 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.159832001 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.159836054 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.160175085 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.160198927 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.160211086 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.160216093 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.160255909 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.171329021 CEST	443	49836	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.179327011 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.179327011 CEST	443	49835	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.179908991 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.180391073 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.180413008 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.180736065 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.181183100 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.181229115 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.181329966 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.186186075 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.186546087 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.186564922 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.186937094 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.187648058 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.187750101 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.188036919 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.199618101 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.199695110 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.199752092 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.199760914 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.200155020 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.200201035 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.200206995 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.206916094 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.206954956 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.207686901 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.207705975 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.207885027 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.207891941 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.208791971 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.208862066 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.208923101 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.208976030 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.212711096 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.212768078 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.213455915 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.213588953 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.213912964 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.213915110 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.213917017 CEST	443	49844	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.213923931 CEST	443	49845	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.227329016 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.231343031 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.236160040 CEST	49841	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.236758947 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.239061117 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.239073038 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.240255117 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.240318060 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.240940094 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.240978003 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.240993023 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.240999937 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.241066933 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.241368055 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.241374016 CEST	443	49847	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.245809078 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.245871067 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.245901108 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.245908976 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.245949984 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.246124029 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.246315956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.246349096 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.246371984 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.246403933 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.246412039 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.246421099 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.251905918 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.251924038 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.251925945 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.267839909 CEST	49844	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.268428087 CEST	49845	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.274089098 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274132967 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274162054 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274185896 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.274199963 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274233103 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274241924 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.274286032 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.274291039 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274389029 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274444103 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.274450064 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274755955 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274791956 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274838924 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.274844885 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.274889946 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.275247097 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.275448084 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.275851011 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.275857925 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.284526110 CEST	49847	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.315249920 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.315327883 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.315335035 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.315439939 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.315521002 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.315526962 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.335870981 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.335891962 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.335956097 CEST	49839	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.335982084 CEST	443	49839	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.353393078 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.353435040 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.353487015 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.353513002 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.353528976 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.353574038 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.356600046 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.356607914 CEST	49837	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.356623888 CEST	443	49837	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.356712103 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.356728077 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.360790968 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361242056 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361272097 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.361290932 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361304998 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.361315966 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361346006 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361373901 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361397028 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.361402035 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.361444950 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.361773014 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.362076998 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.362102032 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.362103939 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.362118959 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.362127066 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.362164974 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.362171888 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.363554001 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.363636017 CEST	443	49846	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.363894939 CEST	49846	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.363930941 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.364038944 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.364089012 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.365185976 CEST	49838	443	192.168.2.10	64.246.164.140
Oct 24, 2024 00:50:49.365201950 CEST	443	49838	64.246.164.140	192.168.2.10
Oct 24, 2024 00:50:49.370524883 CEST	49865	443	192.168.2.10	216.58.212.142
Oct 24, 2024 00:50:49.370549917 CEST	443	49865	216.58.212.142	192.168.2.10
Oct 24, 2024 00:50:49.370688915 CEST	49865	443	192.168.2.10	216.58.212.142
Oct 24, 2024 00:50:49.371117115 CEST	49865	443	192.168.2.10	216.58.212.142
Oct 24, 2024 00:50:49.371128082 CEST	443	49865	216.58.212.142	192.168.2.10
Oct 24, 2024 00:50:49.377054930 CEST	443	49851	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.383466005 CEST	443	49852	13.107.246.45	192.168.2.10
Oct 24, 2024 00:50:49.385473013 CEST	443	49841	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.388537884 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.388569117 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.388712883 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.388730049 CEST	443	49842	64.246.164.134	192.168.2.10
Oct 24, 2024 00:50:49.389466047 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.389507055 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.389533997 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.389533997 CEST	49842	443	192.168.2.10	64.246.164.134
Oct 24, 2024 00:50:49.389560938 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.389568090 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.389575005 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.389589071 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.389635086 CEST	49817	443	192.168.2.10	142.250.185.238
Oct 24, 2024 00:50:49.389642000 CEST	443	49817	142.250.185.238	192.168.2.10
Oct 24, 2024 00:50:49.390381098 CEST	443	49817	142.250.185.238	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:50:35.307589054 CEST	192.168.2.10	1.1.1.1	0x6a0f	Standard query (0)	kristalittle.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:35.307873964 CEST	192.168.2.10	1.1.1.1	0x8113	Standard query (0)	kristalittle.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:36.328474998 CEST	192.168.2.10	1.1.1.1	0x672	Standard query (0)	kristalittle.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:36.328600883 CEST	192.168.2.10	1.1.1.1	0xab5c	Standard query (0)	kristalittle.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:37.847156048 CEST	192.168.2.10	1.1.1.1	0x392f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:37.847666025 CEST	192.168.2.10	1.1.1.1	0xfa9b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:38.583661079 CEST	192.168.2.10	1.1.1.1	0x18e	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.583861113 CEST	192.168.2.10	1.1.1.1	0x88fa	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:38.584444046 CEST	192.168.2.10	1.1.1.1	0xcd66	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.584593058 CEST	192.168.2.10	1.1.1.1	0xfd01	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:38.599173069 CEST	192.168.2.10	1.1.1.1	0xca42	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.599344969 CEST	192.168.2.10	1.1.1.1	0xdc91	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:38.619290113 CEST	192.168.2.10	1.1.1.1	0x706	Standard query (0)	svc.moxiworks.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.619720936 CEST	192.168.2.10	1.1.1.1	0xe563	Standard query (0)	svc.moxiworks.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:38.712491989 CEST	192.168.2.10	1.1.1.1	0xcbb4	Standard query (0)	images.cloud.realogyprod.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.712862968 CEST	192.168.2.10	1.1.1.1	0x5909	Standard query (0)	images.cloud.realogyprod.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:39.617779016 CEST	192.168.2.10	1.1.1.1	0xe7d7	Standard query (0)	images.cloud.realogyprod.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:39.617934942 CEST	192.168.2.10	1.1.1.1	0xb483	Standard query (0)	images.cloud.realogyprod.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:43.658626080 CEST	192.168.2.10	1.1.1.1	0x6902	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.660991907 CEST	192.168.2.10	1.1.1.1	0xfadd	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:44.729638100 CEST	192.168.2.10	1.1.1.1	0x4ff3	Standard query (0)	kristalittle.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.731412888 CEST	192.168.2.10	1.1.1.1	0x5c6e	Standard query (0)	kristalittle.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:44.797197104 CEST	192.168.2.10	1.1.1.1	0x544d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.797475100 CEST	192.168.2.10	1.1.1.1	0x2d5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:44.823733091 CEST	192.168.2.10	1.1.1.1	0xd475	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.824099064 CEST	192.168.2.10	1.1.1.1	0x65aa	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:45.899652004 CEST	192.168.2.10	1.1.1.1	0xc37e	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.899791956 CEST	192.168.2.10	1.1.1.1	0xb690	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:46.142158031 CEST	192.168.2.10	1.1.1.1	0xa164	Standard query (0)	svc.moxiworks.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:46.142158031 CEST	192.168.2.10	1.1.1.1	0x176	Standard query (0)	svc.moxiworks.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.506846905 CEST	192.168.2.10	1.1.1.1	0xb982	Standard query (0)	telize-v1.p.rapidapi.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.507002115 CEST	192.168.2.10	1.1.1.1	0x22d3	Standard query (0)	telize-v1.p.rapidapi.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:48.666661978 CEST	192.168.2.10	1.1.1.1	0xaf5	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.667144060 CEST	192.168.2.10	1.1.1.1	0x6359	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:49.360737085 CEST	192.168.2.10	1.1.1.1	0x5d0e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.360938072 CEST	192.168.2.10	1.1.1.1	0xf66f	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:49.941500902 CEST	192.168.2.10	1.1.1.1	0x2d5	Standard query (0)	disutgh7q0ncc.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.941710949 CEST	192.168.2.10	1.1.1.1	0x8c02	Standard query (0)	disutgh7q0ncc.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:50.322540045 CEST	192.168.2.10	1.1.1.1	0xf6e4	Standard query (0)	telize-v1.p.rapidapi.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:50.322709084 CEST	192.168.2.10	1.1.1.1	0x7c9a	Standard query (0)	telize-v1.p.rapidapi.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:51.520766020 CEST	192.168.2.10	1.1.1.1	0x5eaa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:51.521166086 CEST	192.168.2.10	1.1.1.1	0xad5a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:52.993391037 CEST	192.168.2.10	1.1.1.1	0xcaa7	Standard query (0)	disutgh7q0ncc.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:52.993537903 CEST	192.168.2.10	1.1.1.1	0x5f88	Standard query (0)	disutgh7q0ncc.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:53.007395983 CEST	192.168.2.10	1.1.1.1	0xdefe	Standard query (0)	eligibility.wootric.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:53.007539988 CEST	192.168.2.10	1.1.1.1	0xc57b	Standard query (0)	eligibility.wootric.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:54.399044991 CEST	192.168.2.10	1.1.1.1	0xad00	Standard query (0)	eligibility.wootric.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:54.399214029 CEST	192.168.2.10	1.1.1.1	0x7184	Standard query (0)	eligibility.wootric.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:56.674525023 CEST	192.168.2.10	1.1.1.1	0xddc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:56.674688101 CEST	192.168.2.10	1.1.1.1	0x2a01	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:56.681863070 CEST	192.168.2.10	1.1.1.1	0x3152	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:56.682301998 CEST	192.168.2.10	1.1.1.1	0x4cba	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:56.806905985 CEST	192.168.2.10	1.1.1.1	0x4ef5	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:56.806905985 CEST	192.168.2.10	1.1.1.1	0x3e5d	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:57.254528046 CEST	192.168.2.10	1.1.1.1	0x14eb	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.254679918 CEST	192.168.2.10	1.1.1.1	0x3e70	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:59.161309958 CEST	192.168.2.10	1.1.1.1	0xc844	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.162720919 CEST	192.168.2.10	1.1.1.1	0x3067	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:59.348211050 CEST	192.168.2.10	1.1.1.1	0x6365	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.348716021 CEST	192.168.2.10	1.1.1.1	0xebe	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:50:59.766777039 CEST	192.168.2.10	1.1.1.1	0x10ac	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.767113924 CEST	192.168.2.10	1.1.1.1	0x3dcf	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 24, 2024 00:50:59.784342051 CEST	192.168.2.10	1.1.1.1	0x1b92	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.785367012 CEST	192.168.2.10	1.1.1.1	0x4f53	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 24, 2024 00:51:03.148623943 CEST	192.168.2.10	1.1.1.1	0xd549	Standard query (0)	images-static.moxiworks.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:03.148778915 CEST	192.168.2.10	1.1.1.1	0xe684	Standard query (0)	images-static.moxiworks.com	65	IN (0x0001)	false
Oct 24, 2024 00:51:03.394951105 CEST	192.168.2.10	1.1.1.1	0x3384	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:03.395198107 CEST	192.168.2.10	1.1.1.1	0x9f9b	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:51:04.916841984 CEST	192.168.2.10	1.1.1.1	0x10d2	Standard query (0)	images-static.moxiworks.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:04.917006016 CEST	192.168.2.10	1.1.1.1	0x91d3	Standard query (0)	images-static.moxiworks.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:50:35.341706991 CEST	1.1.1.1	192.168.2.10	0x6a0f	No error (0)	kristalittle.com		64.246.164.134	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:36.339284897 CEST	1.1.1.1	192.168.2.10	0x672	No error (0)	kristalittle.com		64.246.164.134	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:37.854568958 CEST	1.1.1.1	192.168.2.10	0x392f	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:37.855195045 CEST	1.1.1.1	192.168.2.10	0xfa9b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:38.590825081 CEST	1.1.1.1	192.168.2.10	0x18e	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.590825081 CEST	1.1.1.1	192.168.2.10	0x18e	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.591269970 CEST	1.1.1.1	192.168.2.10	0x88fa	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:38.591984987 CEST	1.1.1.1	192.168.2.10	0xcd66	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:38.591984987 CEST	1.1.1.1	192.168.2.10	0xcd66	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.591984987 CEST	1.1.1.1	192.168.2.10	0xcd66	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.591984987 CEST	1.1.1.1	192.168.2.10	0xcd66	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.591984987 CEST	1.1.1.1	192.168.2.10	0xcd66	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.592744112 CEST	1.1.1.1	192.168.2.10	0xfd01	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:38.606307983 CEST	1.1.1.1	192.168.2.10	0xdc91	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:38.606381893 CEST	1.1.1.1	192.168.2.10	0xca42	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.627077103 CEST	1.1.1.1	192.168.2.10	0x706	No error (0)	svc.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:38.627077103 CEST	1.1.1.1	192.168.2.10	0x706	No error (0)	lb-moxi-pr.moxiworks.com		64.246.164.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742176056 CEST	1.1.1.1	192.168.2.10	0x5909	No error (0)	images.cloud.realogyprod.com	zaplabs.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742361069 CEST	1.1.1.1	192.168.2.10	0xcbb4	No error (0)	images.cloud.realogyprod.com	zaplabs.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742361069 CEST	1.1.1.1	192.168.2.10	0xcbb4	No error (0)	zaplabs.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742361069 CEST	1.1.1.1	192.168.2.10	0xcbb4	No error (0)	zaplabs.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742361069 CEST	1.1.1.1	192.168.2.10	0xcbb4	No error (0)	zaplabs.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.742361069 CEST	1.1.1.1	192.168.2.10	0xcbb4	No error (0)	zaplabs.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:38.905329943 CEST	1.1.1.1	192.168.2.10	0xe563	No error (0)	svc.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:39.649307013 CEST	1.1.1.1	192.168.2.10	0xb483	No error (0)	images.cloud.realogyprod.com	zaplabs.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:39.668765068 CEST	1.1.1.1	192.168.2.10	0xe7d7	No error (0)	images.cloud.realogyprod.com	zaplabs.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:39.668765068 CEST	1.1.1.1	192.168.2.10	0xe7d7	No error (0)	zaplabs.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:39.668765068 CEST	1.1.1.1	192.168.2.10	0xe7d7	No error (0)	zaplabs.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:39.668765068 CEST	1.1.1.1	192.168.2.10	0xe7d7	No error (0)	zaplabs.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:39.668765068 CEST	1.1.1.1	192.168.2.10	0xe7d7	No error (0)	zaplabs.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.667427063 CEST	1.1.1.1	192.168.2.10	0x6902	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:43.669595957 CEST	1.1.1.1	192.168.2.10	0xfadd	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:43.669595957 CEST	1.1.1.1	192.168.2.10	0xfadd	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:44.804327965 CEST	1.1.1.1	192.168.2.10	0x544d	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.805152893 CEST	1.1.1.1	192.168.2.10	0x2d5e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:44.832614899 CEST	1.1.1.1	192.168.2.10	0xd475	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.832614899 CEST	1.1.1.1	192.168.2.10	0xd475	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:44.832842112 CEST	1.1.1.1	192.168.2.10	0x65aa	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:44.887643099 CEST	1.1.1.1	192.168.2.10	0x4ff3	No error (0)	kristalittle.com		64.246.164.134	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:45.910639048 CEST	1.1.1.1	192.168.2.10	0xc37e	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:46.329003096 CEST	1.1.1.1	192.168.2.10	0x176	No error (0)	svc.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:46.329003096 CEST	1.1.1.1	192.168.2.10	0x176	No error (0)	lb-moxi-pr.moxiworks.com		64.246.164.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:46.358678102 CEST	1.1.1.1	192.168.2.10	0xa164	No error (0)	svc.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:48.526669025 CEST	1.1.1.1	192.168.2.10	0xb982	No error (0)	telize-v1.p.rapidapi.com		18.198.218.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.526669025 CEST	1.1.1.1	192.168.2.10	0xb982	No error (0)	telize-v1.p.rapidapi.com		3.64.208.154	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677342892 CEST	1.1.1.1	192.168.2.10	0xaf5	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677361965 CEST	1.1.1.1	192.168.2.10	0x6359	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:48.677361965 CEST	1.1.1.1	192.168.2.10	0x6359	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:49.194439888 CEST	1.1.1.1	192.168.2.10	0x46c0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.194439888 CEST	1.1.1.1	192.168.2.10	0x46c0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368030071 CEST	1.1.1.1	192.168.2.10	0xf66f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368030071 CEST	1.1.1.1	192.168.2.10	0xf66f	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.368108988 CEST	1.1.1.1	192.168.2.10	0x5d0e	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.975826979 CEST	1.1.1.1	192.168.2.10	0x2d5	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.975826979 CEST	1.1.1.1	192.168.2.10	0x2d5	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.104	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.975826979 CEST	1.1.1.1	192.168.2.10	0x2d5	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.117	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:49.975826979 CEST	1.1.1.1	192.168.2.10	0x2d5	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.52	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:50.351911068 CEST	1.1.1.1	192.168.2.10	0xf6e4	No error (0)	telize-v1.p.rapidapi.com		18.198.218.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:50.351911068 CEST	1.1.1.1	192.168.2.10	0xf6e4	No error (0)	telize-v1.p.rapidapi.com		3.64.208.154	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:51.531331062 CEST	1.1.1.1	192.168.2.10	0x5eaa	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:51.532233000 CEST	1.1.1.1	192.168.2.10	0xad5a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:50:53.016417980 CEST	1.1.1.1	192.168.2.10	0xdefe	No error (0)	eligibility.wootric.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:53.016417980 CEST	1.1.1.1	192.168.2.10	0xdefe	No error (0)	ghs.googlehosted.com		172.217.18.115	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:53.024431944 CEST	1.1.1.1	192.168.2.10	0xc57b	No error (0)	eligibility.wootric.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:53.191211939 CEST	1.1.1.1	192.168.2.10	0xcaa7	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:53.191211939 CEST	1.1.1.1	192.168.2.10	0xcaa7	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.117	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:53.191211939 CEST	1.1.1.1	192.168.2.10	0xcaa7	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.104	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:53.191211939 CEST	1.1.1.1	192.168.2.10	0xcaa7	No error (0)	disutgh7q0ncc.cloudfront.net		13.32.121.52	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:54.409137011 CEST	1.1.1.1	192.168.2.10	0xad00	No error (0)	eligibility.wootric.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:54.409137011 CEST	1.1.1.1	192.168.2.10	0xad00	No error (0)	ghs.googlehosted.com		142.250.185.243	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:54.416762114 CEST	1.1.1.1	192.168.2.10	0x7184	No error (0)	eligibility.wootric.com	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:56.683520079 CEST	1.1.1.1	192.168.2.10	0xddc	No error (0)	googleads.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:56.683773994 CEST	1.1.1.1	192.168.2.10	0x2a01	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 24, 2024 00:50:56.691699982 CEST	1.1.1.1	192.168.2.10	0x3152	No error (0)	static.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:56.816200018 CEST	1.1.1.1	192.168.2.10	0x3e5d	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:56.816744089 CEST	1.1.1.1	192.168.2.10	0x4ef5	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:56.816744089 CEST	1.1.1.1	192.168.2.10	0x4ef5	No error (0)	photos-ugc.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:57.264556885 CEST	1.1.1.1	192.168.2.10	0x14eb	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.168610096 CEST	1.1.1.1	192.168.2.10	0xc844	No error (0)	play.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.357688904 CEST	1.1.1.1	192.168.2.10	0x6365	No error (0)	static.doubleclick.net		142.250.185.102	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.775958061 CEST	1.1.1.1	192.168.2.10	0x10ac	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:59.775958061 CEST	1.1.1.1	192.168.2.10	0x10ac	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.776592016 CEST	1.1.1.1	192.168.2.10	0x3dcf	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:50:59.794178963 CEST	1.1.1.1	192.168.2.10	0x1b92	No error (0)	googleads.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:50:59.795214891 CEST	1.1.1.1	192.168.2.10	0x4f53	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 24, 2024 00:51:03.337719917 CEST	1.1.1.1	192.168.2.10	0xd549	No error (0)	images-static.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:51:03.337719917 CEST	1.1.1.1	192.168.2.10	0xd549	No error (0)	lb-moxi-pr.moxiworks.com		64.246.164.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:03.370425940 CEST	1.1.1.1	192.168.2.10	0xe684	No error (0)	images-static.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:51:03.403742075 CEST	1.1.1.1	192.168.2.10	0x3384	No error (0)	play.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:03.663203955 CEST	1.1.1.1	192.168.2.10	0x511d	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:51:03.663203955 CEST	1.1.1.1	192.168.2.10	0x511d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:03.663203955 CEST	1.1.1.1	192.168.2.10	0x511d	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:05.109318972 CEST	1.1.1.1	192.168.2.10	0x91d3	No error (0)	images-static.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:51:05.137046099 CEST	1.1.1.1	192.168.2.10	0x10d2	No error (0)	images-static.moxiworks.com	lb-moxi-pr.moxiworks.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:51:05.137046099 CEST	1.1.1.1	192.168.2.10	0x10d2	No error (0)	lb-moxi-pr.moxiworks.com		64.246.164.140	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:24.244359016 CEST	1.1.1.1	192.168.2.10	0x427a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:51:24.244359016 CEST	1.1.1.1	192.168.2.10	0x427a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49717	64.246.164.134	80	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:50:35.348215103 CEST	431	OUT	GET / HTTP/1.1 Host: kristalittle.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:50:36.285219908 CEST	491	IN	HTTP/1.1 301 Moved Permanently date: Wed, 23 Oct 2024 22:50:35 GMT server: Apache expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: private, must-revalidate, max-age=0 location: https://kristalittle.com network-site-url: http://dugout.moxiworks.com/ x-content-type-options: nosniff content-length: 0 content-type: text/html; charset=UTF-8 v-backend: dugout13-pr x-varnish: 251134503 age: 0 via: 1.1 varnish (Varnish/6.5) x-app-server: varnish_dugout/dugout-varnish22-pr
Oct 24, 2024 00:51:21.288590908 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49718	64.246.164.134	80	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:51:20.361212015 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 00:51:25.932106972 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:33 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:33 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225033Z-16849878b789m94j7902zfvfr000000006rg00000000dy7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:33 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:50:33 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 22:50:33 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 22:50:33 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 22:50:33 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 22:50:33 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 22:50:34 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 22:50:34 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 22:50:34 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 22:50:34 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.10	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:35 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:35 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225035Z-r197bdfb6b429k2s6br3k49qn4000000041g000000009uc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:35 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.10	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:35 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:35 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 1cf92a68-e01e-000c-57f4-248e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225035Z-r197bdfb6b4kzncf21qcaynxz8000000012g00000000728y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:35 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.10	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:35 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:35 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ab85fd93-201e-006e-6bf3-24bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225035Z-r197bdfb6b4kkm8440c459r6k800000000xg00000000gnkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:35 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.10	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:35 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:35 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225035Z-16849878b787psctgubawhx7k800000006mg00000000qt2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:35 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.10	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:35 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225035Z-16849878b789m94j7902zfvfr000000006sg00000000a4hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.10	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:36 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 095283a4-c01e-0066-76f4-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225036Z-r197bdfb6b4lkrtc7na2dkay28000000029g000000003nzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.10	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:36 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225036Z-15b8d89586fs9clcgrr6f2d6vg00000000tg00000000eemv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.10	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:36 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:36 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225036Z-15b8d89586fzhrwgk23ex2bvhw00000000w000000000dkpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.10	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:36 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225036Z-16849878b7862vlcc7m66axrs000000006wg00000000a7r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.10	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:36 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:36 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 13d0e6d2-b01e-0053-47f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225036Z-15b8d89586fwzdd8urmg0p1ebs000000088000000000tppc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:36 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49726	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	659	OUT	GET / HTTP/1.1 Host: kristalittle.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:37 UTC	690	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:42:54 GMT server: Apache expires: Wed, 23 Oct 2024 22:47:55 GMT content-security-policy: upgrade-insecure-requests strict-transport-security: max-age=31536000 link: <https://kristalittle.com/wp-json/>; rel="https://api.w.org/" last-modified: Wed, 23 Oct 2024 22:04:20 GMT x-renderedpage: true vary: Accept-Encoding x-content-type-options: nosniff content-type: text/html; charset=UTF-8 v-backend: dugout13-pr x-varnish: 648251914 636820411 age: 462 via: 1.1 varnish (Varnish/6.5) cache-control: private, max-age=0 accept-ranges: bytes content-length: 287138 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:37 UTC	803	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2d 73 74 61 74 69 63 2e 6d 6f 78 69 77 6f 72 6b 73 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 62 72 2f 63 62 77 65 73 74 2f 43 42 5f 46 61 76 69 63 6f 6e 5f 31 34 34 78 31 34 34 2e 69 63 6f 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <!DOCTYPE html> <html lang="en-US"> <head> <link rel="icon" href="https://images-static.moxiworks.com/static/images/br/cbwest/CB_Favicon_144x144.ico"> <meta name="viewport" content="width=device-width
2024-10-23 22:50:37 UTC	13032	IN	Data Raw: 3a 22 66 6f 6e 74 5f 32 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 62 62 62 62 62 62 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 72 69 6d 61 72 79 5f 62 6f 64 79 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 66 32 62 35 32 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 6f 6e 64 61 72 79 5f 62 6f 64 79 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 33 33 33 33 33 33 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 6f 6e 64 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 62 62 62 62 62 62 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 68 69 67 68 6c 69 67 68 74 5f 63 6f 6e Data Ascii: :"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"secondary_body_font","color":"#333333"},{"name":"primary_background_font","color":"#ffffff"},{"name":"secondary_background_font","color":"#bbbbbb"},{"name":"highlight_con
2024-10-23 22:50:37 UTC	2896	IN	Data Raw: 20 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 76 63 2e 77 69 6e 64 65 72 6d 65 72 65 2e 63 6f 6d 5c 2f 73 65 72 76 69 63 65 5c 2f 76 31 5c 2f 61 75 74 68 5c 2f 73 65 73 73 69 6f 6e 73 5c 2f 6c 6f 67 6f 75 74 2e 6a 73 6f 6e 5c 22 5c 72 5c 6e 5d 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 61 6e 6e 65 72 5f 69 6d 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6d 61 67 65 73 2d 73 74 61 74 69 63 2e 6d 6f 78 69 77 6f 72 6b 73 2e 63 6f 6d 5c 2f 73 74 61 74 69 63 5c 2f 69 6d 61 67 65 73 5c 2f 62 72 5c 2f 63 6c 65 61 72 5f 62 61 72 2d 38 30 30 78 37 30 2e 70 6e 67 22 2c 22 63 68 72 6f 6d 65 5f 70 72 6f 78 79 5f 6b 65 79 22 3a 22 22 2c 22 63 6d 61 5f 70 64 66 5f 76 65 72 73 69 6f 6e 73 22 3a 5b 31 Data Ascii: \"https:\/\/svc.windermere.com\/service\/v1\/auth\/sessions\/logout.json\"\r\n]","background_color":"#ffffff","banner_image_url":"https:\/\/images-static.moxiworks.com\/static\/images\/br\/clear_bar-800x70.png","chrome_proxy_key":"","cma_pdf_versions":[1
2024-10-23 22:50:37 UTC	2896	IN	Data Raw: 6b 65 79 5f 77 61 6c 6b 73 63 6f 72 65 22 3a 22 22 2c 22 62 75 74 74 6f 6e 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 68 61 74 5f 61 6c 6c 6f 77 65 64 5f 64 61 79 73 22 3a 5b 5d 2c 22 63 6d 61 5f 64 65 66 61 75 6c 74 5f 73 74 79 6c 65 22 3a 22 6d 6f 64 65 72 6e 22 2c 22 63 6d 61 5f 76 69 65 77 5f 75 72 6c 5f 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 70 72 65 73 65 6e 74 2e 63 62 6d 6f 78 69 2e 63 6f 6d 22 2c 22 63 72 6d 5f 70 72 69 6d 61 72 79 5f 63 6f 6c 6f 72 22 3a 22 23 30 31 32 31 36 39 22 2c 22 65 63 6f 6d 6d 5f 61 6c 6c 6f 77 5f 70 6f 72 63 68 22 3a 22 66 61 6c 73 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 70 61 67 65 5f 75 72 6c 22 3a 22 22 2c 22 66 6f 6e 74 5f 66 61 63 65 5f 70 72 69 6d 61 72 79 22 3a 22 27 52 Data Ascii: key_walkscore":"","button_font_color":"#ffffff","chat_allowed_days":[],"cma_default_style":"modern","cma_view_url_root":"https:\/\/present.cbmoxi.com","crm_primary_color":"#012169","ecomm_allow_porch":"false","facebook_page_url":"","font_face_primary":"'R
2024-10-23 22:50:37 UTC	16384	IN	Data Raw: 63 62 6d 6f 78 69 2e 63 6f 6d 5c 2f 64 6f 63 73 5c 2f 70 72 69 76 61 63 79 22 2c 22 63 6c 61 73 73 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 69 76 61 63 79 22 2c 22 61 70 70 5f 69 64 22 3a 22 70 72 69 76 61 63 79 22 2c 22 74 61 72 67 65 74 22 3a 22 22 7d 5d 2c 22 63 6d 61 5f 61 75 74 68 6f 72 69 6e 67 5f 63 6f 6c 6f 72 22 3a 22 23 33 39 38 39 63 39 22 2c 22 63 6d 61 5f 70 72 65 73 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 7b 20 5c 22 74 79 70 65 5c 22 3a 5c 22 73 6f 6c 69 64 5c 22 2c 20 5c 22 63 6f 6c 6f 72 5c 22 3a 5c 22 23 33 39 38 39 63 39 5c 22 20 7d 22 2c 22 63 6d 61 5f 70 72 65 73 5f 6c 69 6e 65 5f 63 6f 6c 6f 72 22 3a 22 22 2c 22 64 65 66 61 75 6c 74 5f 61 67 65 6e 74 5f 69 6d 61 67 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4e 4f 49 4d 41 47 45 Data Ascii: cbmoxi.com\/docs\/privacy","class":"","title":"Privacy","app_id":"privacy","target":""}],"cma_authoring_color":"#3989c9","cma_pres_background":"{ \"type\":\"solid\", \"color\":\"#3989c9\" }","cma_pres_line_color":"","default_agent_image":{"title":"NOIMAGE
2024-10-23 22:50:37 UTC	2440	IN	Data Raw: 65 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 5c 75 30 30 61 39 32 30 32 30 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 74 79 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 74 79 20 66 75 6c 6c 79 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 69 6e 63 69 70 6c 65 73 20 6f 66 20 74 68 65 20 46 61 69 72 20 48 6f 75 73 69 6e 67 20 41 63 74 20 61 6e 64 20 74 68 65 20 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 41 63 74 2e 20 4f 77 6e 65 64 20 62 79 20 61 20 73 75 62 73 69 64 69 61 72 79 20 6f 66 20 4e 52 54 20 4c 4c 43 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 61 6e 64 20 74 68 65 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 4c 6f Data Ascii: e_disclaimer":"\u00a92020 Coldwell Banker Realty. All Rights Reserved. Coldwell Banker Realty fully supports the principles of the Fair Housing Act and the Equal Opportunity Act. Owned by a subsidiary of NRT LLC. Coldwell Banker and the Coldwell Banker Lo
2024-10-23 22:50:37 UTC	4344	IN	Data Raw: 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 61 6e 64 20 74 68 65 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 4c 6f 67 6f 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 73 65 72 76 69 63 65 20 6d 61 72 6b 73 20 6f 77 6e 65 64 20 62 79 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 20 45 73 74 61 74 65 20 4c 4c 43 2e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 50 69 74 74 73 62 75 72 67 68 22 2c 22 75 75 69 64 22 3a 22 65 33 34 62 65 63 61 30 2d 39 34 33 64 2d 30 31 33 35 2d 38 32 33 66 2d 30 30 35 30 35 36 39 63 35 34 61 64 22 2c 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 63 6f 70 79 72 69 67 68 74 22 3a 22 26 63 6f 70 79 3b 20 23 23 59 45 41 52 23 23 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 20 45 73 74 61 74 65 Data Ascii: Coldwell Banker and the Coldwell Banker Logo are registered service marks owned by Coldwell Banker Real Estate LLC."},{"name":"Pittsburgh","uuid":"e34beca0-943d-0135-823f-0050569c54ad","active":true,"copyright":"© ##YEAR## Coldwell Banker Real Estate
2024-10-23 22:50:37 UTC	1448	IN	Data Raw: 76 69 63 65 2c 20 61 6e 64 20 69 74 20 6d 61 79 20 69 6e 63 6c 75 64 65 20 61 70 70 72 6f 78 69 6d 61 74 69 6f 6e 73 2e 20 41 6c 74 68 6f 75 67 68 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 62 65 6c 69 65 76 65 64 20 74 6f 20 62 65 20 61 63 63 75 72 61 74 65 2c 20 69 74 20 69 73 20 6e 6f 74 20 77 61 72 72 61 6e 74 65 64 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c 64 20 6e 6f 74 20 72 65 6c 79 20 75 70 6f 6e 20 69 74 20 77 69 74 68 6f 75 74 20 70 65 72 73 6f 6e 61 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 20 52 65 61 6c 20 65 73 74 61 74 65 20 61 67 65 6e 74 73 20 61 66 66 69 6c 69 61 74 65 64 20 77 69 74 68 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 61 72 65 20 69 Data Ascii: vice, and it may include approximations. Although the information is believed to be accurate, it is not warranted and you should not rely upon it without personal verification. Real estate agents affiliated with Coldwell Banker Residential usererage are i
2024-10-23 22:50:37 UTC	1448	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 72 65 6c 79 20 75 70 6f 6e 20 69 74 20 77 69 74 68 6f 75 74 20 70 65 72 73 6f 6e 61 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 20 52 65 61 6c 20 65 73 74 61 74 65 20 61 67 65 6e 74 73 20 61 66 66 69 6c 69 61 74 65 64 20 77 69 74 68 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 61 72 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 74 72 61 63 74 6f 72 20 73 61 6c 65 73 20 61 73 73 6f 63 69 61 74 65 73 2c 20 6e 6f 74 20 65 6d 70 6c 6f 79 65 65 73 2e 20 5c 75 30 30 61 39 32 30 31 39 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e Data Ascii: uld not rely upon it without personal verification. Real estate agents affiliated with Coldwell Banker Residential usererage are independent contractor sales associates, not employees. \u00a92019 Coldwell Banker Residential usererage. All Rights Reserved.
2024-10-23 22:50:37 UTC	1448	IN	Data Raw: 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 61 72 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 74 72 61 63 74 6f 72 20 73 61 6c 65 73 20 61 73 73 6f 63 69 61 74 65 73 2c 20 6e 6f 74 20 65 6d 70 6c 6f 79 65 65 73 2e 20 5c 75 30 30 61 39 32 30 31 39 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 66 75 6c 6c 79 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 69 6e 63 69 70 6c 65 73 20 6f 66 20 74 68 65 20 46 61 69 72 20 48 6f 75 73 69 6e 67 20 41 63 74 20 61 6e Data Ascii: Banker Residential usererage are independent contractor sales associates, not employees. \u00a92019 Coldwell Banker Residential usererage. All Rights Reserved. Coldwell Banker Residential usererage fully supports the principles of the Fair Housing Act an

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.10	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225037Z-r197bdfb6b4qpk6v9629ad4b5s0000000beg00000000d83h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.10	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225037Z-15b8d89586flspj6y6m5fk442w00000003z0000000001psm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.10	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225037Z-16849878b7862vlcc7m66axrs000000006wg00000000a7tp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.10	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225037Z-16849878b789m94j7902zfvfr000000006s000000000byxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.10	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:37 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225037Z-16849878b78p4hmjy4vha5ddqw00000006q000000000pq8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.10	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 89a40e36-b01e-00ab-18ad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225038Z-15b8d89586fvk4kmwqg9fgbkn800000002fg0000000052m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.10	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225038Z-16849878b787sbpl0sv29sm89s00000006y000000000dffb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.10	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:38 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225038Z-16849878b78mhkkf6kbvry07q000000006ng00000000uev1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.10	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:38 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:38 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225038Z-16849878b78dsttbr1qw36rxs800000006y00000000053pe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.10	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:38 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225038Z-16849878b78plcdqu15wsb886400000006tg00000000ef4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49746	151.101.65.229	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	607	OUT	GET /npm/@moxiworks/project-vitruvius@0.0.21/build/project-vitruvius-icons.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3808 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 0.0.21 X-JSD-Version-Type: version ETag: W/"ee0-UDdmY3iQg1jsYRjjBrpjwMtt8hU" Accept-Ranges: bytes Age: 2267641 Date: Wed, 23 Oct 2024 22:50:39 GMT X-Served-By: cache-fra-etou8220141-FRA, cache-dfw-kdal2120030-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:50:39 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 69 74 72 75 76 69 75 73 2d 69 63 6f 6e 2d 73 65 74 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 56 69 74 72 75 76 69 75 73 2d 69 63 6f 6e 2d 73 65 74 2e 65 6f 74 3f 78 75 34 6e 35 31 29 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 56 69 74 72 75 76 69 75 73 2d 69 63 6f 6e 2d 73 65 74 2e 65 6f 74 3f 78 75 34 6e 35 31 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 56 69 74 72 75 76 69 75 73 2d 69 63 6f 6e 2d 73 65 74 2e 74 74 66 3f 78 75 34 6e 35 31 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 56 69 74 72 75 76 69 75 73 2d 69 63 6f 6e 2d 73 65 74 2e Data Ascii: @font-face{font-family:Vitruvius-icon-set;src:url(fonts/Vitruvius-icon-set.eot?xu4n51);src:url(fonts/Vitruvius-icon-set.eot?xu4n51#iefix) format('embedded-opentype'),url(fonts/Vitruvius-icon-set.ttf?xu4n51) format('truetype'),url(fonts/Vitruvius-icon-set.
2024-10-23 22:50:39 UTC	1378	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 65 39 32 34 22 7d 2e 76 2d 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 2d 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 39 22 7d 2e 76 2d 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 2d 70 69 6e 2d 66 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 65 22 7d 2e 76 2d 69 63 6f 6e 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 33 22 7d 2e 76 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 66 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 66 22 7d 2e 76 2d 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 33 30 22 7d 2e 76 2d 69 63 6f 6e 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b Data Ascii: ntent:"\e924"}.v-icon-location-pin:before{content:"\e919"}.v-icon-location-pin-filled:before{content:"\e92e"}.v-icon-heart:before{content:"\e913"}.v-icon-heart-filled:before{content:"\e92f"}.v-icon-heart-useren:before{content:"\e930"}.v-icon-check:before{
2024-10-23 22:50:39 UTC	1052	IN	Data Raw: 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 31 22 7d 2e 76 2d 69 63 6f 6e 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 35 22 7d 2e 76 2d 69 63 6f 6e 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 38 22 7d 2e 76 2d 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 39 22 7d 2e 76 2d 69 63 6f 6e 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 64 22 7d 2e 76 2d 69 63 6f 6e 2d 61 74 74 65 6e 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 30 31 22 7d 2e 76 2d 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b Data Ascii: on:before{content:"\e921"}.v-icon-question-circle:before{content:"\e925"}.v-icon-star:before{content:"\e928"}.v-icon-trash:before{content:"\e929"}.v-icon-video:before{content:"\e92d"}.v-icon-attention-circle:before{content:"\e901"}.v-icon-facebook:before{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49748	104.18.11.207	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	574	OUT	GET /bootstrap/3.2.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	951	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"385b964b68acb68d23cb43a5218fade9" Last-Modified: Mon, 25 Jan 2021 22:03:57 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/01/2024 03:18:46 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 46f2c7105a7c9232d0a9830b95539243 CDN-Cache: HIT CF-Cache-Status: HIT Age: 22441 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d75498ba9a2e726-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 22:50:39 UTC	418	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 Data Ascii: 7bfb/! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e Data Ascii: display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{fon
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d Data Ascii: kit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{padding:.35em .625em
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 Data Ascii: icons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff) format('woff'),url(../fonts/glyphicons-halflings-regular.ttf) format('truetype'),url(../font
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 Data Ascii: ore{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content:"\e017"}.glyphicon-signal:before{content:"\e018"}.glyphicon-cog:before{content:"\e019"}.glyphicon-trash:before{content:"\e020"}.glyphicon-home:before{content:"\e0
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 77 69 64 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 72 69 67 68 74 Data Ascii: :"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e050"}.glyphicon-text-width:before{content:"\e051"}.glyphicon-align-left:before{content:"\e052"}.glyphicon-align-center:before{content:"\e053"}.glyphicon-align-right
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 71 75 65 73 74 69 6f 6e 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6e 66 6f 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: on-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphicon-remove-sign:before{content:"\e083"}.glyphicon-ok-sign:before{content:"\e084"}.glyphicon-question-sign:before{content:"\e085"}.glyphicon-info-sign:before{content:"\
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 Data Ascii: n-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphicon-folder-close:before{content:"\e117"}.glyphicon-folder-open:before{content:"\e118"}.glyphicon-resize-vertical:before{content:"\e119"}.glyphicon-resize-horizontal:be
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 62 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 2d 61 6c 74 3a 62 65 66 6f 72 65 Data Ascii: :"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"}.glyphicon-gbp:before{content:"\e149"}.glyphicon-sort:before{content:"\e150"}.glyphicon-sort-by-alphabet:before{content:"\e151"}.glyphicon-sort-by-alphabet-alt:before
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 70 72 65 73 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 61 72 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 2d 61 6c 74 3a 62 Data Ascii: re{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{content:"\e179"}.glyphicon-header:before{content:"\e180"}.glyphicon-compressed:before{content:"\e181"}.glyphicon-earphone:before{content:"\e182"}.glyphicon-phone-alt:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49747	104.18.11.207	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	580	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	950	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/06/2024 01:22:44 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 925ce50056c053a76028b17f3f524940 CDN-Cache: HIT CF-Cache-Status: HIT Age: 12956 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d75498bb8e46c40-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 22:50:39 UTC	419	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a Data Ascii: ./fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 Data Ascii: -webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 Data Ascii: ck-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b Data Ascii: e{content:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: re{content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{con
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 66 61 2d 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 Data Ascii: fa-eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:bef
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: hone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{co
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 5c 66 30 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f Data Ascii: \f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:befo
2024-10-23 22:50:39 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: efore{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{con

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.10	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225039Z-16849878b7842t5ke0k7mzbt3c00000006s0000000004u4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.10	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fc16bb1d-401e-000a-34f4-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225039Z-15b8d89586f4zwgbz365q03b0c0000000drg000000001edt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.10	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225039Z-16849878b785jsrm4477mv3ezn00000006vg000000006g4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.10	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b38717f8-301e-0020-78f3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225039Z-15b8d89586fxdh48qknu9dqk2g000000026g0000000042x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49745	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	601	OUT	GET /wp-includes/css/dashicons.min.css?ver=782b628426a895c0dfd7727f0e7fb402 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	513	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:50:11 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:20 GMT cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:50:11 GMT vary: Accept-Encoding x-content-type-options: nosniff access-control-allow-origin: * content-type: text/css v-backend: dugout13-pr x-varnish: 654508599 619447522 age: 7227 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 59016 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:39 UTC	2428	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2024-10-23 22:50:39 UTC	11584	IN	Data Raw: 79 33 79 75 68 31 6b 6b 66 66 64 77 52 5a 35 33 78 31 69 6b 63 2f 30 6f 55 59 2b 66 36 74 4e 4e 78 54 70 4d 4e 4f 74 54 46 70 6a 35 4c 4e 79 75 4f 6d 6d 4a 68 31 68 75 72 4e 4a 52 35 70 75 62 39 4a 52 70 6e 75 63 64 4c 54 70 52 69 63 64 59 37 72 62 53 63 65 61 62 6e 6e 53 63 55 62 65 70 38 63 62 65 62 31 50 4d 50 4b 65 50 64 48 49 65 2f 59 6b 49 37 2b 66 4a 78 74 35 33 6d 75 4e 2f 4c 31 50 73 63 68 37 38 31 53 4c 58 50 4e 4f 73 38 68 37 34 48 51 6a 76 34 64 6e 6d 4c 6f 4c 30 70 6c 47 58 75 4f 7a 4c 50 4c 2b 4f 74 73 69 37 38 31 7a 4c 48 49 4e 4f 64 66 49 38 7a 6a 50 79 50 4d 34 33 38 6a 7a 75 4d 44 49 38 2f 69 41 6b 65 64 78 6f 5a 47 66 63 5a 31 46 72 6c 45 58 57 65 53 7a 65 62 46 46 50 70 65 58 47 4c 6c 57 58 57 72 6b 66 58 53 5a 6b 66 66 61 35 55 61 65 Data Ascii: y3yuh1kkffdwRZ53x1ikc/0oUY+f6tNNxTpMNOtTFpj5LNyuOmmJh1hurNJR5pub9JRpnucdLTpRicdY7rbSceabnnScUbep8cbeb1PMPKePdHIe/YkI7+fJxt53muN/L1Psch781SLXPNOs8h74HQjv4dnmLoL0plGXuOzLPL+Otsi781zLHINOdfI8zjPyPM438jzuMDI8/iAkedxoZGfcZ1FrlEXWeSzebFFPpeXGLlWXWrkfXSZkffa5Uae
2024-10-23 22:50:39 UTC	16384	IN	Data Raw: 48 33 67 74 66 57 31 31 39 66 6e 35 6d 33 6c 56 58 4c 5a 51 75 31 61 6c 38 78 6c 53 73 64 76 7a 4f 5a 53 37 34 55 58 64 68 2b 42 72 47 37 4f 42 4b 37 30 49 4b 4e 35 32 70 43 44 59 2b 76 56 71 34 4c 65 6e 6a 71 31 56 4e 7a 51 5a 57 32 75 45 71 73 6f 53 46 6e 38 30 6d 6e 67 5a 32 66 6c 76 7a 32 61 30 70 46 66 52 37 38 46 66 58 4d 6e 63 35 48 35 5a 72 4c 53 55 65 55 43 77 57 69 6b 33 4a 52 2b 41 42 56 30 43 62 6c 49 36 6c 4a 74 38 67 51 77 64 36 69 6f 6d 54 41 65 50 69 48 31 58 57 72 6f 46 51 65 2b 31 32 6b 33 47 31 4e 38 52 77 75 38 6a 4e 7a 59 61 4e 32 6a 47 67 74 50 6f 41 6e 6b 43 70 45 65 56 4a 76 2f 53 70 52 56 43 54 43 77 6b 54 5a 59 52 56 55 56 31 6b 6a 44 6f 69 41 69 32 56 6e 4c 4b 33 36 4b 58 61 75 48 39 35 63 4b 57 53 77 57 79 6b 2b 74 35 44 56 64 Data Ascii: H3gtfW119fn5m3lVXLZQu1al8xlSsdvzOZS74UXdh+BrG7OBK70IKN52pCDY+vVq4Lenjq1VNzQZW2uEqsoSFn80mngZ2flvz2a0pFfR78FfXMnc5H5ZrLSUeUCwWik3JR+ABV0CblI6lJt8gQwd6iomTAePiH1XWroFQe+12k3G1N8Rwu8jNzYaN2jGgtPoAnkCpEeVJv/SpRVCTCwkTZYRVUV1kjDoiAi2VnLK36KXauH95cKWSwWyk+t5DVd
2024-10-23 22:50:39 UTC	12576	IN	Data Raw: 5a 62 66 4f 62 43 69 46 57 69 79 4b 4b 4b 6d 31 2b 78 75 34 42 34 35 66 38 37 43 4f 55 78 54 31 30 57 39 4c 72 58 56 46 42 4b 36 34 70 2f 6f 35 6c 77 2f 6a 7a 48 77 63 55 64 39 77 6e 77 69 71 61 50 31 68 43 6d 46 78 4d 6e 4a 79 43 45 7a 45 59 34 59 63 6f 41 2f 4c 4c 4c 4f 77 61 6f 2b 34 4f 69 53 51 44 32 74 6d 74 46 61 44 38 66 44 5a 6a 79 30 4f 6c 67 59 79 76 4d 38 69 31 45 36 6d 30 73 4a 41 55 30 50 52 32 4a 68 31 76 78 35 78 47 47 4a 48 48 4e 58 55 41 2b 52 73 79 68 53 57 4c 6a 66 4e 52 49 46 51 39 4a 79 34 43 4c 4f 61 57 49 30 41 72 7a 36 6b 66 44 68 42 47 2f 7a 45 73 74 61 50 47 38 4a 55 74 47 4d 6d 57 59 38 33 4b 75 6a 51 2b 35 6c 73 50 43 41 5a 63 64 48 74 46 6c 35 33 36 79 79 33 6c 78 65 62 67 37 74 33 7a 2f 55 62 46 49 6d 58 36 4c 6c 4c 6a 58 71 Data Ascii: ZbfObCiFWiyKKKm1+xu4B45f87COUxT10W9LrXVFBK64p/o5lw/jzHwcUd9wnwiqaP1hCmFxMnJyCEzEY4YcoA/LLLOwao+4OiSQD2tmtFaD8fDZjy0OlgYyvM8i1E6m0sJAU0PR2Jh1vx5xGGJHHNXUA+RsyhSWLjfNRIFQ9Jy4CLOaWI0Arz6kfDhBG/zEstaPG8JUtGMmWY83KujQ+5lsPCAZcdHtFl536yy3lxebg7t3z/UbFImX6LlLjXq
2024-10-23 22:50:39 UTC	16044	IN	Data Raw: 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 65 61 73 65 2d 69 6e 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 61 64 6d 69 6e 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 61 64 6d 69 6e 2d 63 6f 6c 6c 61 70 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 38 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 61 64 6d 69 6e 2d 63 6f 6d 6d 65 Data Ascii: osx-font-smoothing:grayscale;width:20px;height:20px;font-size:20px;vertical-align:top;text-align:center;transition:color .1s ease-in}.dashicons-admin-appearance:before{content:"\f100"}.dashicons-admin-collapse:before{content:"\f148"}.dashicons-admin-comme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49744	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	645	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-thickbox-0703f4632eb5b4a19e7b065b249c746d.css?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	494	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:26 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:19 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:26 GMT x-content-type-options: nosniff content-type: text/css v-backend: dugout12-pr x-varnish: 252445145 687276177 age: 100152 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 385887 x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:39 UTC	5343	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 42 61 72 6c 6f 77 2b 53 65 6d 69 2b 43 6f 6e 64 65 6e 73 65 64 3a 77 67 68 74 40 36 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 23 54 42 5f 6f 76 65 72 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 30 2e 37 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 37 30 29 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 35 30 7d 23 54 42 5f 77 69 6e 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: @import url('//fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:wght@600&display=swap');#TB_overlay{background:#000;opacity:0.7;filter:alpha(opacity=70);position:fixed;top:0;right:0;bottom:0;left:0;z-index:100050}#TB_window{position:fixed;background
2024-10-23 22:50:39 UTC	8688	IN	Data Raw: 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 69 6e 69 74 69 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 Data Ascii: ck-button__link:where([style=border-style]){border-width:initial}.wp-block-button .wp-block-button__link:where([style=border-top-style]){border-top-width:medium}.wp-block-button .wp-block-button__link:where([style*=border-right-style]){border-right-widt
2024-10-23 22:50:39 UTC	14480	IN	Data Raw: 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d Data Ascii: ound-gradient,.wp-block-cover-image .has-background-dim.has-background-gradient{background-color:transparent}.wp-block-cover-image.has-background-dim:before,.wp-block-cover.has-background-dim:before{background-color:inherit;content:""}.wp-block-cover .wp-
2024-10-23 22:50:39 UTC	14480	IN	Data Raw: 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e 74 65 72 2d 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 6c 65 66 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 Data Ascii: ver__inner-container,.wp-block-cover.has-custom-content-position.has-custom-content-position.is-position-center-right .wp-block-cover__inner-container,.wp-block-cover.has-custom-content-position.has-custom-content-position.is-position-top-left .wp-block-c
2024-10-23 22:50:39 UTC	10136	IN	Data Raw: 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 61 6c 69 67 6e 72 69 67 68 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f Data Ascii: ) .blocks-gallery-image:last-child,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item:last-child{margin-right:0}.blocks-gallery-grid:not(.has-nested-images).alignleft,.blocks-gallery-grid:not(.has-nested-images).alignright,.wp-block-gallery:no
2024-10-23 22:50:39 UTC	16384	IN	Data Raw: 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 63 61 6c 63 28 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 20 2b 20 31 36 70 78 29 3b 74 6f 70 3a 63 61 6c 63 28 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 20 2b 20 31 36 70 78 29 3b 7a 2d 69 6e 64 65 78 3a 35 30 30 30 30 30 30 7d 2e 77 70 2d 6c 69 67 68 74 62 6f 78 2d 6f 76 65 72 6c 61 79 20 2e 63 6c 6f 73 65 2d 62 Data Ascii: tems:center;cursor:pointer;display:flex;justify-content:center;min-height:40px;min-width:40px;padding:0;position:absolute;right:calc(env(safe-area-inset-right) + 16px);top:calc(env(safe-area-inset-top) + 16px);z-index:5000000}.wp-lightbox-overlay .close-b
2024-10-23 22:50:40 UTC	16384	IN	Data Raw: 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 7b 6c 65 66 74 3a 2d 31 70 78 3b 72 69 67 68 74 3a 2d 31 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 68 61 73 2d 63 68 69 6c 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 Data Ascii: :last-child .wp-block-navigation__submenu-container .wp-block-navigation__submenu-container{left:-1px;right:-1px}@media (min-width:782px){.wp-block-navigation.items-justified-right .wp-block-navigation__container .has-child .wp-block-navigation__submenu-c
2024-10-23 22:50:40 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 67 61 70 3a 31 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 3e 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 66 6c 65 78 2d Data Ascii: ackground:none}.wp-block-post-template.is-flex-container{display:flex;flex-direction:row;flex-wrap:wrap;gap:1.25em}.wp-block-post-template.is-flex-container>li{margin:0;width:100%}@media (min-width:600px){.wp-block-post-template.is-flex-container.is-flex-
2024-10-23 22:50:40 UTC	16384	IN	Data Raw: 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 65 6c 65 67 72 61 6d 7b 63 6f 6c 6f 72 3a 23 32 61 61 62 65 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 68 72 65 61 64 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 69 6b 74 6f 6b 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 74 Data Ascii: -logos-only .wp-social-link-telegram{color:#2aabee}.wp-block-social-links.is-style-logos-only .wp-social-link-threads,.wp-block-social-links.is-style-logos-only .wp-social-link-tiktok{color:#000}.wp-block-social-links.is-style-logos-only .wp-social-link-t
2024-10-23 22:50:41 UTC	16384	IN	Data Raw: 2c 2e 6d 78 2d 66 6f 72 6d 2d 6d 6f 64 61 6c 20 2e 6d 78 2d 66 6f 72 6d 2d 69 6e 69 74 69 61 6c 2e 66 6f 72 6d 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 78 2d 66 6f 72 6d 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 62 6f 64 79 3a 6e 6f 74 28 2e 64 6f 6e 65 2d 73 68 6f 77 2d 74 68 61 6e 6b 73 29 20 2e 6d 78 2d 66 6f 72 6d 2d 65 6c 65 6d 65 6e 74 2e 66 6f 72 6d 2d 64 69 73 70 6c 61 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 78 2d 66 6f 72 6d 2d 6d 6f 64 61 6c 20 64 69 76 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 6d 61 78 2d 77 69 64 74 68 3a 33 35 36 70 78 7d 2e 6d 78 2d 66 6f 72 6d 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 0a 62 75 74 74 6f 6e 2e 63 6c Data Ascii: ,.mx-form-modal .mx-form-initial.form-display{display:none}.mx-form-modal .modal-body:not(.done-show-thanks) .mx-form-element.form-display{display:block}.mx-form-modal div.modal-content{max-width:356px}.mx-form-modal .modal-content .modal-headerbutton.cl

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.10	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225039Z-16849878b78gvgmlcfru6nuc5400000006v00000000089d6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:39 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49753	151.101.2.133	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	703	OUT	GET /companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJnvoiPEPddrP4Gced7dSNKYtMbP.jpg?width=500 HTTP/1.1 Host: images.cloud.realogyprod.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	781	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4930 Content-Type: image/webp Etag: "iPWgiOT9guO2a5RgD/ii3M2uUfvYMJJ5uZ9DW2A3MeU" Fastly-Io-Info: ifsz=11816 idim=500x134 ifmt=png ofsz=4930 odim=500x134 ofmt=webp Fastly-Io-Served-By: vpop-haf2300711 Fastly-Stats: io=1 Server: AmazonS3 X-Amz-Id-2: iUmsLiK6pBOOqsSozNQuSabuYnmZAFAvYAb2RX8o1vgsKa0Lb+UqJN35REP780dIiKUbhDCYNi8= X-Amz-Request-Id: QS641YP4PCCJQY6D X-Amz-Server-Side-Encryption: AES256 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 901 Date: Wed, 23 Oct 2024 22:50:39 GMT X-Served-By: cache-bfi-kbfi7400043-BFI, cache-dfw-kdal2120113-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 X-Timer: S1729723840.541968,VS0,VE1 Vary: Accept Cache-Control: max-age=7200 access-control-allow-origin: *
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 52 49 46 46 3a 13 00 00 57 45 42 50 56 50 38 4c 2d 13 00 00 2f f3 41 21 10 ff 27 16 4c e6 2f 1d 42 ef fc cf ff 04 24 74 9c 87 3d 6c db d7 3f c9 ee df b6 1f 63 34 8c 31 1a bb 0b 50 47 c3 2b dd 5d 2f 16 26 f0 ca cf 82 59 a4 23 27 18 b4 60 4b 28 0d 4a 97 41 77 2a f5 a3 3b 46 b3 51 bb ff f8 7c be 9f e7 f3 fd 6e fc 78 bf ff 45 f4 7f 02 90 cd 57 4d 82 0f bf 69 9e 0f 17 e4 35 1f ae 35 59 cd 7f 5b 40 fe e4 bb 15 21 99 9e d3 6f 7b 9f 24 3b f8 6d db 95 65 3e db e3 d4 16 f7 d7 be d4 7d e8 af 9d d6 ed f6 d5 ea d3 b1 bc ff 52 ac 7a 97 81 3f 2f 5c b7 2d bc 77 d7 fa 15 33 87 f7 68 fa 44 94 67 a6 39 8d f2 57 e2 5b 0c df 90 4e f9 e1 e9 6f 3f e6 89 e8 1b 4e e7 fd 94 86 93 2e d0 fe ea e4 e2 2e 04 82 f9 0a 97 ba e7 a1 7e 34 7c f7 c1 7b 4a c5 e7 0b fa 1f b9 bb 87 e9 72 fa b8 Data Ascii: RIFF:WEBPVP8L-/A!'L/B$t=l?c41PG+]/&Y#'`K(JAw*;FQ\|nxEWMi55Y[@!o{$;me>}Rz?/\-w3hDg9W[No?N..~4\|{Jr
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 75 31 9c 86 24 24 9a 96 c9 97 f5 7e 48 48 4c 4c 4c 28 de f6 aa a6 a3 51 63 6a 0b 59 e0 6f ee 85 35 87 a2 8d 32 9e 28 92 68 58 3c 31 ca e9 64 89 22 89 89 89 09 25 2a 4f d3 1c 01 50 9e c2 1b f9 6e 43 eb 75 af c1 f1 6d 5d 5a 0e 60 a9 ee 5d 38 d6 3c a3 49 cf e3 da 50 38 46 0d d6 f0 71 00 fb 94 4b 41 a5 14 b5 fd 35 29 9a d6 06 c9 90 67 b1 cf a1 6f ad e9 61 b4 5b 37 d6 06 ff ce e1 d2 14 6a ef 83 d1 d5 20 e4 9a a3 70 5e a4 30 09 e8 21 99 8a db 6f 3d 6a 6b c3 b0 09 c9 b4 af 6a 44 23 89 da 36 30 2c 7d 41 61 8a 6b 63 9c 80 7e 9a c9 00 7a 29 6c ae 8c d1 5d 0a 2a 07 94 8b 41 83 be d9 cd 68 07 5c 53 52 4d 9a d0 b1 98 0d 6e 2b ec 4a 37 6a 5b c1 2c bd 98 ad e3 31 4e cf 6a ba 01 0b 25 cd 6f 43 7f 69 ba c1 f8 83 8d af e4 03 80 69 9a 54 18 57 d1 9c 8b f1 10 76 29 d7 f3 01 Data Ascii: u1$$~HHLLL(QcjYo52(hX<1d"%OPnCum]Z`]8<IP8FqKA5)goa[7j p^0!o=jkjD#60,}Aakc~z)l]Ah\SRMn+J7j[,1Nj%oCiiTWv)
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 68 65 fd 27 29 29 29 29 3d bf 3c 46 ed 13 c0 a7 b4 5c c9 0a 06 5a c2 cf 1a 4e 32 ba f9 c3 b0 51 86 63 86 e5 97 e0 15 0d 9b 00 38 28 f8 29 db 62 29 77 12 4e e8 cc af 3f 04 35 e7 4e 9d b0 22 4c a4 ab 11 ad 11 77 83 61 cc 79 92 95 9c b0 9f 64 07 91 74 9a 81 34 51 27 9d 6c 45 ba 09 c8 7d 53 b9 d0 e9 8d 37 1d 5f ef a9 59 6b 07 ef 5a c2 ef 1a 8e 31 11 97 16 61 ba e6 7a 61 60 8b 60 6e f6 35 c9 1d 94 da 2d 3b 55 0e fa 3c 6b 65 97 6a c0 85 29 88 b1 12 82 f1 d7 e4 66 18 76 24 af c6 b9 34 d2 56 7a 61 3b c3 3c f0 14 30 90 ea 7b 30 5e aa b0 a6 1d 3c 6f 09 cb 35 4c b5 96 51 5c 16 75 52 e1 3a 60 81 60 ab 87 4e 0f 18 30 d0 f2 80 41 3f 85 6d b0 b8 3b c8 f9 a3 64 56 02 0c 47 48 96 de 05 af ad aa 02 f3 67 c8 46 26 38 c5 1f 70 5b 79 11 28 70 43 b9 1a 34 4b d2 6c b5 84 ba 99 Data Ascii: he'))))=<F\ZN2Qc8()b)wN?5N"Lwaydt4Q'lE}S7_YkZ1aza``n5-;U<kej)fv$4Vza;<0{0^<o5LQ\uR:``N0A?m;dVGHgF&8p[y(pC4Kl
2024-10-23 22:50:39 UTC	793	IN	Data Raw: ae 0e 35 7e 0c bd 39 35 d2 59 a9 3c 62 f0 63 97 f7 1d bb 75 2f 66 f2 22 49 a6 36 56 66 66 0d 1c 27 c9 ad 24 79 3d 5f e4 01 14 ec ba d3 9d d3 23 cb 42 ff e0 2f 63 52 e5 43 97 5c 96 b1 4b 44 52 d7 e9 2d 92 3c 0e 03 f3 1a 26 27 94 32 b8 40 92 f7 67 8d 3a 8a f6 0d 44 a8 4d 27 9e b3 75 7a 62 bb 3c 70 3b e1 fd 73 22 16 8b 44 3e 79 b2 5c b9 72 4f 3d db 7e 3a d5 21 b6 92 0c 3a 92 e4 72 e0 13 65 76 d6 c0 1c 87 2d 88 5c 0b b4 fc 7a eb 35 c9 99 45 83 ea e7 81 27 13 e7 88 e6 46 22 d2 78 5b d5 0d 8e 2b d5 80 5c 19 24 f9 78 d6 48 70 78 2c 82 51 4b d4 eb 34 f4 db df 16 cd 5f 38 6f fc 88 0f 5a 94 8d 83 87 7f 90 b0 5c a4 d3 0a 26 9b 66 cf 77 5c b0 e8 21 a7 2e 24 b9 15 00 86 28 8b b2 06 3e d4 8c 42 44 1e 57 31 d6 03 58 21 99 1d d9 5c 7d 01 46 b5 60 35 8d 64 e6 c3 0a 4e 92 Data Ascii: 5~95Y<bcu/f"I6Vff'$y=_#B/cRC\KDR-<&'2@g:DM'uzb<p;s"D>y\rO=~:!:rev-\z5E'F"x[+\$xHpx,QK4_8oZ\&fw\!.$(>BDW1X!\}F`5dN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49752	151.101.2.133	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	703	OUT	GET /companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJwmIJnoCKF6Zs4y4XbygGbcJe6v.jpg?width=500 HTTP/1.1 Host: images.cloud.realogyprod.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:39 UTC	781	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7358 Content-Type: image/webp Etag: "o/GttlU7FBiAX8dqoBadHG4Xde2sbNDpELsdhGYUUrw" Fastly-Io-Info: ifsz=14375 idim=500x117 ifmt=png ofsz=7358 odim=500x117 ofmt=webp Fastly-Io-Served-By: vpop-haf2300712 Fastly-Stats: io=1 Server: AmazonS3 X-Amz-Id-2: I69PEAAtwwBT+u5xPKuQKZkfAUTNKHVfNqSOaEN+uXEuKaMJNBnLUSyBR6HRH7qcso9B6EbsU9c= X-Amz-Request-Id: PK7W4Z087796P1Q9 X-Amz-Server-Side-Encryption: AES256 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 5060 Date: Wed, 23 Oct 2024 22:50:39 GMT X-Served-By: cache-bfi-kbfi7400031-BFI, cache-dfw-ktki8620026-DFW X-Cache: HIT, HIT X-Cache-Hits: 5, 0 X-Timer: S1729723840.545315,VS0,VE1 Vary: Accept Cache-Control: max-age=7200 access-control-allow-origin: *
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 52 49 46 46 b6 1c 00 00 57 45 42 50 56 50 38 4c a9 1c 00 00 2f f3 01 1d 10 55 87 82 b6 6d a4 84 3f ec dd db 12 88 88 09 e0 d2 7c dc 2e ca 2d 6d e3 b6 ca ca a3 65 dd 6d 80 80 c3 56 fe 26 ac cb 78 9f c1 d2 4a ce 25 df 73 cc b7 23 6d db 72 39 ce 2f 66 6e e6 f3 35 08 bb 45 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 3c d3 e7 fb fe ff f4 5f fd 57 fd 63 ea 72 e6 f2 0e bc 09 8c 3a ed 58 5b 31 9d dc 1b a0 50 a9 62 83 76 a1 68 96 a0 d2 12 06 4f 7c 52 c5 aa d9 4c ef 61 62 d3 50 d4 55 1d 75 3a 0b 31 a4 8a 95 2a 1b 88 fe aa ce de 2a 47 e3 fc c4 5e 87 d2 13 77 39 9b cc 90 fd 69 c7 5e 81 b3 93 29 56 39 53 7c 72 c7 5a c3 c4 5a 86 19 54 27 79 4b f1 94 33 d2 3e 3a 55 6a 66 bb d3 8e 95 9f 2d 78 13 2e 67 43 51 77 74 aa 77 30 3b f0 36 ce 1e b4 07 65 b2 b3 53 e5 13 41 Data Ascii: RIFFWEBPVP8L/Um?\|.-memV&xJ%s#mr9/fn5E<_Wcr:X[1PbvhO\|RLabPUu:1**G^w9i^)V9S\|rZZT'yK3>:Ujf-x.gCQwtw0;6eSA
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 47 c6 a9 2b 21 a8 22 09 64 64 0f 2c a6 33 92 04 b6 b2 78 1f c5 de 04 50 8f 02 db 02 6e 11 fb ad 9b 98 7a 04 48 96 24 b0 6b 80 a6 2c a0 f3 80 72 d9 15 00 06 92 60 4a f1 13 07 24 24 1f 46 b1 97 08 b0 73 21 74 06 46 7d a0 c4 36 fa fa 50 f0 d3 ab 68 80 e3 25 a7 a5 0a a0 94 fa 12 e1 1b b2 67 6c 42 81 8f cd b2 2e 84 ad 13 41 90 1f c0 5e b1 1b 7b 10 1f 70 53 ec af 00 b2 6c 8e 2c 46 02 3f 80 92 01 ac 8e ce f8 66 2d 01 71 cf 5a 9b 30 60 98 69 40 05 c9 e3 73 5c 4b 0c 48 30 60 3d 8b 1d 8f 92 36 1e 01 2c 25 70 b5 d6 18 09 28 87 8d cd 80 4d 03 54 0c f8 0f a8 5d c0 45 ce f7 61 a2 15 00 22 92 60 31 4a e0 43 bd ec d4 04 0e 42 a3 9d 17 57 8e 32 d4 e5 62 6a 81 03 aa 98 4b a9 00 6a 09 93 d0 cf 2c 77 84 59 f6 9e b1 14 cc 19 15 f2 02 c4 29 7e 58 00 cf 05 62 14 bf d7 cb ce 2d Data Ascii: G+!"dd,3xPnzH$k,r`J$$Fs!tF}6Ph%glB.A^{pSl,F?f-qZ0`i@s\KH0`=6,%p(MT]Ea"`1JCBW2bjKj,wY)~Xb-
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 01 b1 ec e7 04 85 57 e6 5d f0 ff d0 3f 84 2d 9b 73 ad 67 74 91 11 c3 9a bf 43 37 50 3b c1 b0 d6 27 bb f8 9f 88 0b ff 83 90 d6 7c 13 92 7d fe 64 8a 7d 00 fd 82 8c 9b 9b ae e4 ff a9 c0 5b 6d 92 bc ad 55 d1 36 f6 3d 61 04 f1 bc 08 00 73 c5 dd 77 09 30 a2 cd 71 6d 98 32 26 de 0f ae 83 22 44 c4 9e ee 8f 6c 91 00 0f 33 08 26 7d 75 73 74 4f 1e f3 c2 a6 0b 39 74 46 66 95 a6 ae d9 f5 b1 c9 de 4d 77 cc 84 40 9a f9 9d 21 94 02 cd 36 12 70 07 b2 40 81 60 c0 ac 60 9f c3 2e 94 9f e3 50 4b 80 27 0e 40 ff c6 9c 5a 0f 98 33 7f 71 0b b3 9f fd ec 67 df c8 39 8e 4a f6 32 99 2c 88 62 7f d9 a6 77 30 1c 1a 2a da 17 f5 29 15 04 54 3f e6 63 43 e7 27 8e 96 b3 ab 60 d0 5d a7 7f b3 0a 0e fb 08 cf 0d 22 1e 15 15 5d ec bf 32 da 06 d1 50 4e d8 19 d8 d5 36 21 e2 b4 f6 5b 32 41 20 0e e0 Data Ascii: W]?-sgtC7P;'\|}d}[mU6=asw0qm2&"Dl3&}ustO9tFfMw@!6p@``.PK'@Z3qg9J2,bw0*)T?cC'`]"]2PN6![2A
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 40 e4 e1 b9 22 07 b1 ae 14 91 3b 4d 4e fe 6f cc 77 ac 16 24 7b ff 60 d2 cd 9a f7 48 c2 ad a7 e1 01 39 b4 c6 90 c8 53 9b 79 0c 07 e3 f8 9d 67 4f 65 9b e9 d9 a1 9d 34 49 fc 45 a8 05 8f b4 6a d4 75 d5 28 43 1d 5f 3a 18 f3 5e 6b 8d 6d 0a 41 20 32 2e f8 42 3d 81 2b a1 bb de 6b 7b 02 ff 81 e9 ba 90 66 e9 7f c2 d0 5b 91 0e 88 fe 5a 92 2e 35 9b 73 4d 75 7c 49 56 c9 cc 80 0e f9 d2 b2 9f c2 d0 75 1a 4d 3d 09 27 9c 86 cf ed d0 bd a4 5a 41 75 14 ef c3 08 0c 24 4a b1 2f 67 a6 68 3b c7 96 42 89 0a a2 58 4c 43 3c a7 f2 7a 53 26 bd 51 11 19 01 f6 2b 47 fc cd e8 e8 7f 90 fb 88 01 56 cc b1 d3 62 38 b0 96 36 14 c0 4f 10 38 64 9e 80 c4 3c 00 fe e4 b2 ff c6 fc 0c 83 af c5 f1 dc 69 d8 09 cf 2e 87 f1 95 1d 02 86 39 f3 ec 47 67 d4 8f 34 86 f8 f5 ed 00 6d 9d 38 14 6f 88 79 88 63 Data Ascii: @";MNow${`H9SygOe4IEju(C_:^kmA 2.B=+k{f[Z.5sMu\|IVuM='ZAu$J/gh;BXLC<zS&Q+GVb86O8d<i.9Gg4m8oyc
2024-10-23 22:50:39 UTC	1379	IN	Data Raw: 93 98 bd 56 ad 96 74 33 c8 73 03 dd 57 3f cd 05 85 1a 08 9d 41 1d fd ec df 46 0c 98 ec f9 c7 5d 77 bc ef 08 79 1e e1 6a f2 b5 00 07 9e d0 39 44 10 48 aa 45 83 8e 97 f6 ae 6f bb ef e0 1b 2a 02 46 07 da 5f 3a f2 cd 57 1b 03 5c 6a 47 00 41 d0 dc 9d 11 9d 6b ed 90 ae 80 96 97 8e ec ce 00 46 c6 81 2c 1f 64 bf f4 84 ba 12 d4 8b bf 78 e9 77 b8 0f e0 59 a6 00 57 5b 0e c0 58 ea 4c 57 37 8e a2 61 ae bb 56 1c b8 46 7a ae 90 f7 51 49 d1 b3 34 e9 8d 4a 59 0a 54 29 fc 0b e6 ee db 61 45 f7 24 e2 7d 04 82 22 80 b5 24 dd 4d 08 98 51 fc c1 71 bf 65 81 42 c0 dd c8 5e 4f d9 02 14 a3 bb bb db 72 7a 16 e9 e4 d0 50 11 79 b8 ea 7e 69 02 79 84 42 8e fb 1d b9 3b 10 04 12 aa 3b 11 d2 ad 78 e6 1f f7 30 11 a0 43 c3 02 f0 61 7b 6e 76 3c 9b 93 22 41 94 d9 e9 80 57 36 93 66 19 03 08 82 Data Ascii: Vt3sW?AF]wyj9DHEo*F_:W\jGAkF,dxwYW[XLW7aVFzQI4JYT)aE$}"$MQqeB^OrzPy~iyB;;x0Ca{nv<"AW6f
2024-10-23 22:50:39 UTC	463	IN	Data Raw: 03 ce 24 fd 00 70 fe 9e 81 b8 77 fe a8 36 2d 49 3d f0 5d e8 ef 8c c9 af 1d 2e 8f e8 bc 3f fb 66 77 49 b2 47 69 49 92 e6 1e 10 79 0f 24 7b 21 49 20 8d a1 df 63 86 e2 0b 9f 75 f9 6b fe b0 74 67 26 48 a6 11 49 7a ed dd 77 f1 a8 8c ae d4 ac 33 0e 6c 90 55 83 90 74 66 33 0f e2 07 48 d2 d4 d3 6d ff e2 25 bd 74 a2 d3 2b 77 6c ea ba 9c 3f 53 a4 d3 fa 24 6d b9 ca c3 6b 30 bb fe 31 24 47 14 77 7a e4 f0 24 a9 0f 0c 1f 9d 39 ae 74 43 f8 1d 49 ff 90 e8 61 ca 1b 1b 9a 9e 3c 23 53 52 27 54 90 4e d5 0b 3e a1 6b a9 b7 2e df c7 5c cb bf 9c 50 bd 8d ff 04 c9 ea 05 9f 50 e4 86 2a c9 97 07 bc cb fe 97 1e 3c 48 44 c5 2d bc fc 09 5d cb 79 56 f0 5d 36 74 42 91 0b be 58 b3 ae 5a d7 72 42 0b 7e f6 04 95 1b 3a a1 0d 55 96 33 66 b8 76 38 88 75 54 41 42 95 c7 4b a2 ad 5c 47 d4 ee 72 Data Ascii: $pw6-I=].?fwIGiIy${!I cuktg&HIzw3lUtf3Hm%t+wl?S$mk01$Gwz$9tCIa<#SR'TN>k.\PP*<HD-]yV]6tBXZrB~:U3fv8uTABK\Gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:50:39 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=64533 Date: Wed, 23 Oct 2024 22:50:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.10	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0124f848-201e-003f-38ad-246d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225040Z-15b8d89586f8nxpt5xx0pk7du80000000430000000001sfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.10	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:40 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225040Z-16849878b78rjhv97f3nhawr7s00000006vg000000006nxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:40 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.10	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff77512b-301e-000c-17f4-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225040Z-15b8d89586fzhrwgk23ex2bvhw00000000v000000000hh3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.10	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225040Z-16849878b78dghrpt8v731n7r400000006tg000000006aph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	49759	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	615	OUT	GET /files/2024/06/Krista-Little-scaled.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:41 UTC	473	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:04:22 GMT server: Apache content-length: 629609 last-modified: Tue, 25 Jun 2024 22:32:56 GMT etag: "53347bcb48d25d062068bce3773b7ef9" expires: Sat, 25 Dec 2027 07:51:02 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout13-pr x-varnish: 655196691 640844966 age: 2777 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:41 UTC	2468	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 0a 00 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-10-23 22:50:41 UTC	11584	IN	Data Raw: 39 a5 52 3a 52 0a 5a 02 c3 ce 00 a6 e0 d2 1c 9a 5c 73 c9 a0 2c 18 f6 a5 1d 3a d2 66 97 ad 00 26 7d a8 04 d1 40 eb 40 0e e2 9e b4 ce 86 9c 28 02 65 20 63 9a 70 c6 6a 35 e9 4f 53 9a 00 9d 57 bd 4c 84 54 69 c8 e2 9e 94 19 8f cd 45 21 e6 a4 35 1c 83 9e b4 0d 10 c9 ef 50 3f 3c d4 d2 1a 85 8f 6a 0b 23 3c d1 9e 30 68 3c 50 78 a0 00 11 4a 3a d2 03 9a 51 c5 00 49 e9 4e 2d 9e 94 d0 68 aa 4c 04 6e 95 13 8c 54 c4 66 a2 73 4e e4 d8 af 21 a8 5b 9a 9a 4e 86 ab 93 57 74 50 bb bb 50 29 9b b9 f5 a5 cf b1 a9 93 28 7e 68 1d 69 01 1e f4 a3 d6 a0 09 09 18 a6 f4 eb 49 cd 14 00 e0 45 3c 71 d2 a3 dd f8 d2 ee cd 00 38 b0 cd 26 ee 7a 9a 6e 79 a5 ce 7d a9 12 c7 e6 9e 9d 7a d3 07 4a 90 0a 02 c4 a0 8a 72 d3 14 77 a9 05 05 75 1f 8c d3 a9 ab cf 14 b9 e6 93 01 dc 7a 53 81 e7 3d e9 9b 88 Data Ascii: 9R:RZ\s,:f&}@@(e cpj5OSWLTiE!5P?<j#<0h<PxJ:QIN-hLnTfsN![NWtPP)(~hiIE<q8&zny}zJrwuzS=
2024-10-23 22:50:41 UTC	4344	IN	Data Raw: 33 52 86 c9 49 c5 29 6c f6 c5 33 34 dd c6 99 36 24 26 93 34 c0 c6 97 77 af 14 c5 61 ae 70 69 14 9a 71 50 dd e8 0a 07 a9 aa 4c 07 03 91 52 6e ed da 98 bf 8d 3f 6f 5a 77 26 c3 83 1a 70 6c 9e d5 1a b6 40 a7 a9 39 e9 4c 43 89 fa 53 73 f4 a7 12 7b d3 0f 5a ad 89 62 86 a7 0e 45 32 9c 0f 1c d2 6c 12 14 1a 70 3c 53 38 a7 7b 52 b8 c9 07 4a 7a 9a 89 49 a7 ab 92 71 c5 5c 5e 84 b2 50 69 8e 79 a5 07 90 29 1f ad 0c 69 90 48 78 23 bd 66 5d f5 cd 69 cb f2 8e 39 cd 66 5c 9c e7 da b9 a6 cd 62 63 dd b0 dc 78 aa 40 7c c4 d5 bb a2 59 ba d5 50 39 ac 56 e6 d6 ea 5b b7 1b 9b da b5 a0 1d 07 7a cb b5 1f 30 f7 ad 68 00 24 63 b5 6f 13 29 97 a2 1b 71 56 73 f9 d4 31 0c ad 49 d2 ba 23 23 01 e0 d4 a8 f8 ed 50 64 d3 d5 8d 0e 41 ca 58 56 dc 78 e2 a5 04 91 d7 15 04 67 b7 53 52 86 ed 8a 86 Data Ascii: 3RI)l346$&4wapiqPLRn?oZw&pl@9LCSs{ZbE2lp<S8{RJzIq\^Piy)iHx#f]i9f\bcx@\|YP9V[z0h$co)qVs1I##PdAXVxgSR
2024-10-23 22:50:41 UTC	7240	IN	Data Raw: a5 3f b6 69 84 60 9a 99 0c 7a f1 41 e7 b6 68 c7 02 8d a6 a0 63 76 0a 8d d7 af 22 a5 3c 53 18 93 45 c6 42 50 e7 39 e9 4c 92 a5 63 8e 2a 17 ad 10 58 85 f8 a8 9a a5 73 c5 40 c3 35 49 89 8d 27 14 dd d9 e9 4a 46 38 14 d0 31 54 48 81 b9 39 e3 e9 4b 9a 4d be e3 14 b8 e2 9d 82 c0 0e 4d 38 62 9a 01 cd 3c 0c 7d 29 58 42 8e 29 cb c9 a4 03 75 3d 57 1d e9 88 70 52 45 3c 46 7a 0e 9e b4 88 38 a9 54 fe 55 56 2a c2 28 ed 4b 8c 53 80 e6 94 d3 18 80 53 b0 7e b4 01 e9 4e db dc d3 24 7a 8e 2a 50 06 07 15 1a 8c 0c 54 aa 38 c5 26 0c 89 d3 83 cd 54 90 75 ab d2 0e 08 e6 a9 48 33 9a 87 a1 2c a9 20 aa ee 32 6a cc 8b c5 57 61 83 57 12 6c 30 2e 0e 73 56 60 5e 9d 2a 10 a0 8a b3 6e a3 8c 56 88 cd ee 5f 80 74 f5 ab 71 f5 e7 9a ab 08 c7 3d ea dc 6b 83 43 02 d4 78 c5 48 1b 9a 85 4e 29 e0 Data Ascii: ?i`zAhcv"<SEBP9LcXs@5I'JF81TH9KMM8b<})XB)u=WpRE<Fz8TUV(KSS~N$zPT8&TuH3, 2jWaWl0.sV`^nV_tq=kCxHN)
2024-10-23 22:50:41 UTC	2896	IN	Data Raw: 78 e6 90 0f 14 a2 9a bd 29 68 00 c9 f5 a2 97 9f 41 48 29 dc 04 3d 29 9d 49 eb 52 37 4e 0d 31 a9 00 d2 31 4d 3c d3 8d 30 ff 00 fa a8 18 86 95 69 7f 4a 76 da 60 26 28 22 95 7a f4 a5 24 7d 69 08 85 ba 1a 85 fa 9a 9d 86 2a 07 f7 a0 08 9e 98 dd 29 ef da a3 6e 95 63 b0 87 38 a8 d8 0e d4 ec fb d3 1c e4 50 51 13 e3 bd 42 c4 76 a9 1e a3 34 09 91 13 cd 20 3c d0 dc 1f ad 2d 52 24 91 7a 8a 9d 2a ba 55 84 ab 48 09 00 fa 1a 5c 1e d4 da 78 38 14 6c 03 b9 14 98 1e 94 a0 66 8e 9d ea 1e e0 37 1f 5c 51 81 df 3f 95 3b 9f 6a 53 d7 8e b5 25 8d c6 79 e9 ed 4a 83 06 94 0e 78 a7 0a 00 05 39 69 07 b5 38 67 3d 28 01 eb de 9a 39 34 e5 a6 8f d6 93 02 44 18 39 18 a9 87 4c f7 a8 23 fb e2 a4 27 0d 50 c0 90 f6 a7 53 49 e9 eb 47 6a 2c 55 84 61 cd 44 d8 e9 cd 49 48 7a 74 a6 32 26 1f e4 d4 Data Ascii: x)hAH)=)IR7N11M<0iJv`&("z$}i)nc8PQBv4 <-R$zUH\x8lf7\Q?;jS%yJx9i8g=(94D9L#'PSIGj,UaDIHzt2&
2024-10-23 22:50:41 UTC	14480	IN	Data Raw: 07 26 a4 53 50 a9 23 b5 48 a6 80 26 53 52 2f 5a 8c 53 d4 d0 04 ab d7 a5 38 b6 7e b4 c5 34 e0 c7 3e b4 00 a4 90 78 34 9e f4 99 f5 e2 94 9e 28 00 27 8a 61 18 a5 26 86 03 19 a4 01 c6 d3 4d a2 8f c6 93 01 4d 38 53 73 9a 70 eb 48 09 16 96 9b f8 d2 e6 98 05 00 66 8a 5c e0 50 03 58 62 98 69 c4 93 48 68 01 29 a7 19 a7 1e 29 8d eb 4c 03 f9 d2 9a 4a 5e b4 98 0a 3a 52 e3 34 0e 06 69 7a fb 52 02 23 c7 d6 a3 7e 86 a6 61 51 30 e3 ad 00 57 73 83 50 b3 8f 4a 91 fa 9a 85 f8 a7 72 c4 3d 39 fc ea 27 cf 4a 93 f0 cd 46 fe f5 40 42 fd 79 a8 8e 2a 67 c7 6a 81 8d 31 5c 66 39 3e f4 ab e9 49 4a b5 54 c4 c7 21 39 15 61 6a 05 1c f5 ab 08 33 56 d8 89 13 8e b5 22 8c f3 4c 54 cd 4c 14 63 19 a8 6c 07 20 1d e9 31 4a 16 8d a2 a1 95 61 0f 14 80 53 8d 20 c7 14 0c 70 19 19 34 01 8a 51 41 a4 Data Ascii: &SP#H&SR/ZS8~4>x4('a&MM8SspHf\PXbiHh))LJ^:R4izR#~aQ0WsPJr=9'JF@By*gj1\f9>IJT!9aj3V"LTLcl 1JaS p4QA
2024-10-23 22:50:41 UTC	2896	IN	Data Raw: e0 62 9a 40 f5 a0 08 5c 55 39 ba 55 c7 3d 45 55 94 71 40 14 24 cd 54 93 ad 5d 94 62 a9 c8 33 5a 21 5c 8c 10 07 4a 72 f5 cd 33 3c d3 81 c1 e9 56 a2 c4 5b 88 e4 8a b2 9d 6a a4 4d 82 2a d2 9f 4a 1a 11 3a 9e 2a 45 35 00 39 a9 05 48 12 06 a7 8f 5a 88 7b 53 83 fb d4 d8 07 6e e7 a7 14 e2 dc 74 e2 a3 cf 3e fe b4 bb cd 21 8e dd 8a 32 4f 63 4d 04 7b 52 e5 4f 5a 2c 17 17 19 cd 2a 03 8c 1a 3e 86 80 71 da 8b 30 24 ed cf 5e d4 bc d3 03 fb 52 ee 3e 94 9a 1a 1d 4b 4c dd 46 ea 56 1d c7 13 8a 4d d4 85 b0 29 81 db 3d 38 a2 c0 3c f3 4b 51 34 84 1a 55 72 7a 8c 53 b0 12 d2 e2 a3 f7 a7 06 34 58 57 17 14 a0 77 a4 c9 ef 4e 07 22 95 82 e0 38 a4 a5 34 62 9a 42 6c 3b 54 62 a5 ed d6 90 a0 eb 9c 53 04 c6 a1 1b aa 41 c9 a6 aa e0 f0 4d 3f 90 7d 68 06 39 79 34 e2 3e 6c 0a 45 f5 a7 83 ce Data Ascii: b@\U9U=EUq@$T]b3Z!\Jr3<V[jMJ:E59HZ{Snt>!2OcM{ROZ,*>q0$^R>KLFVM)=8<KQ4UrzS4XWwN"84bBl;TbSAM?}h9y4>lE
2024-10-23 22:50:41 UTC	16384	IN	Data Raw: 86 01 cf 34 1c 76 e6 94 93 4d 2d c5 1c 8c 2e 2f 18 a5 18 c7 1c 8f 7a 8f 76 0f 4c d0 5f 9c 53 b0 36 4b bb 14 bd 7d 2a 3d c3 00 53 0b aa fa 53 48 86 c9 87 1d 49 a4 2f 8f 4a 83 ce 04 63 34 d3 28 07 ad 57 23 25 48 b1 bc 8e 98 a6 f9 87 35 0f 9b cf 04 d3 8c be bc d1 ec c7 ce 4e 18 77 eb 4e 18 22 ab ab 6e 1c 1e 7d 29 e5 c2 f1 ce 68 e4 1f 39 2a a8 cf 5a 95 7e 5e ad 8a ac 8f f3 70 31 f5 a9 03 03 d3 ad 47 b3 1f b4 2c 29 5f ef 7e b4 ec 8c 70 c0 d5 7c e3 af 7a 76 47 1d e8 e4 1f 31 32 b9 ef 4e 56 e3 ad 44 bc 8e 45 3c 60 75 35 0e 36 1a 91 26 ef 7a 7a 91 eb 9a 8f 1c 71 8a 17 02 95 8a 52 26 07 1d c5 2e 47 b5 45 b8 0e 94 6f c6 09 34 15 72 c0 07 14 e0 db 7b 54 02 42 dd 0d 28 90 8e bc d2 b0 5c 94 93 4a 1e 9a 39 14 63 d2 8b 15 71 cb d6 95 87 cb 42 d2 9a 2c 21 8d d2 a3 c7 3c Data Ascii: 4vM-./zvL_S6K}=SSHI/Jc4(W#%H5NwN"n})h9Z~^p1G,)_~p\|zvG12NVDE<`u56&zzqR&.GEo4r{TB(\J9cqB,!<
2024-10-23 22:50:41 UTC	16384	IN	Data Raw: 49 e9 4f 8f 0a e3 81 bb b8 35 b3 da c6 68 92 79 58 30 00 80 00 ab 96 d1 fd 82 2f b7 4d 87 91 89 08 a7 b1 f5 aa d0 42 1a e9 1a 42 15 01 c9 26 99 77 3b 5d dc 92 0e 17 76 00 f6 a9 11 20 95 ad c4 97 0e c0 ca dc 0e f8 a4 d2 6d d2 49 8c f3 fd d4 e7 2d eb 51 3c 26 7b 85 b7 8c 12 32 3a 73 57 ef a1 c7 97 6b 16 30 bc 3b 7a 1a 6d d9 0a da 91 5f 5f c9 76 e0 21 19 6e 3e b4 c7 46 b5 88 41 1b 7c ee 32 cd 4f 4f 22 cf 25 57 79 40 7e 63 dc d5 28 c4 b7 93 90 09 39 e4 9f 41 42 d7 61 b2 48 63 89 18 00 0c 8f e8 bc d5 cb 68 a2 81 81 11 79 d7 0c 70 aa 39 0b f5 a8 93 e4 6f b3 59 af 99 23 70 cc a3 f9 57 43 a7 e8 09 a5 29 be d6 66 16 b1 a8 ca 44 0f ce e6 a6 4e c3 8c 46 4d 77 35 84 22 2c b3 dd 3a e0 05 38 0b f8 56 44 96 a6 49 49 b9 12 5c 4a 71 85 53 90 bf 53 52 6a 1a e7 db 27 90 da Data Ascii: IO5hyX0/MBB&w;]v mI-Q<&{2:sWk0;zm__v!n>FA\|2OO"%Wy@~c(9ABaHchyp9oY#pWC)fDNFMw5",:8VDII\JqSSRj'
2024-10-23 22:50:41 UTC	16384	IN	Data Raw: 83 e6 04 f0 a6 b9 fb 19 c5 cc 11 dc 2c 8a db 97 0d c6 73 c5 47 e1 eb bf 2e 49 ac 9d c6 c1 c8 42 7a 7d 2b 28 54 b3 2a 71 e6 57 3b 36 b9 fe cf bb 10 2b 03 14 c3 08 c6 a9 4e 2f 0c d2 da 9b 24 1b 48 68 66 53 db bd 29 8e 2d 47 4c 68 4b 7e fe 33 be 23 9e 72 29 74 ab a5 d5 6d 59 44 a1 6f 21 fe 1c f2 71 da bb a3 52 e8 e1 94 2c c9 f4 dd 4f 52 d1 e6 dc 26 10 c4 ff 00 2b 83 fc 42 b2 f5 ed 3e 5d 1a fb ed 51 31 78 a4 6d f8 cf 1c d4 d7 b7 ce 70 2e 2d cb c5 2f ca e0 ff 00 01 ad 41 2b 6a 3a 23 69 62 34 91 d4 65 1c 8e 71 e9 4d 32 19 85 e2 a8 8f 88 34 f8 ee 2d 2d 63 56 18 de 57 a9 c5 59 f0 4e b3 f6 bb 51 63 71 36 e9 22 e3 0c 79 ac ad 1b 50 8e c2 fc d8 3e e4 c3 63 e6 f5 a8 7c 61 61 37 87 ee 13 57 b7 51 e4 31 da fb 7a e4 ff 00 4a 65 25 73 7b c4 16 ab 67 7e 93 18 4a b4 9c 2c Data Ascii: ,sG.IBz}+(T*qW;6+N/$HhfS)-GLhK~3#r)tmYDo!qR,OR&+B>]Q1xmp.-/A+j:#ib4eqM24--cVWYNQcq6"yP>c\|aa7WQ1zJe%s{g~J,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	49761	151.101.2.133	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	467	OUT	GET /companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJnvoiPEPddrP4Gced7dSNKYtMbP.jpg?width=500 HTTP/1.1 Host: images.cloud.realogyprod.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:41 UTC	779	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7555 Content-Type: image/png Etag: "x+h7lfAxRmuR/PFLDbJML2virulaSkj23zvpXZArmuY" Fastly-Io-Info: ifsz=11816 idim=500x134 ifmt=png ofsz=7555 odim=500x134 ofmt=png Fastly-Io-Served-By: vpop-haf2300711 Fastly-Stats: io=1 Server: AmazonS3 X-Amz-Id-2: iUmsLiK6pBOOqsSozNQuSabuYnmZAFAvYAb2RX8o1vgsKa0Lb+UqJN35REP780dIiKUbhDCYNi8= X-Amz-Request-Id: QS641YP4PCCJQY6D X-Amz-Server-Side-Encryption: AES256 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 623 Date: Wed, 23 Oct 2024 22:50:40 GMT X-Served-By: cache-bfi-kbfi7400043-BFI, cache-dfw-kdal2120032-DFW X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1729723840.476934,VS0,VE69 Vary: Accept Cache-Control: max-age=7200 access-control-allow-origin: *
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 86 08 03 00 00 00 1c 95 88 c6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRsRGBPLTE
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: fa 28 2d 5c dd be 83 44 38 45 52 47 fb 3e 79 72 54 ca 35 9d 3a 5f db c5 d4 be ae 6b e7 4e 6d 52 a2 c2 58 77 1f 25 41 6a b7 58 5b c6 01 d1 d7 5f ca e7 48 bb a1 41 f7 1e e9 37 f6 ac 9e 11 9f d9 4b d6 ef 95 19 1f 9b d5 b3 77 9f e6 dd fb dc e4 4d 93 7c 38 23 aa 63 5f 67 ca 01 fd ea b1 79 e2 6e 96 bf 04 96 e8 7f 8b 57 cd f2 e1 80 01 01 7e e5 14 03 eb 73 d9 92 cf 73 93 a9 85 47 8d f2 e1 84 ec e6 ee 28 27 c8 19 c4 65 ad 1a 38 c7 ad 1e b5 ca 87 13 6e 73 f9 96 46 74 b8 9d cb 3c f8 0e 67 f5 21 77 7a d4 2a 1f 4e e8 17 0c e5 04 77 71 d9 eb dd ed a4 3b 74 98 47 ad f2 e1 80 61 37 06 cb b9 aa 0e e7 8b b8 cc 5e f3 62 6f 1a e5 c3 11 d9 23 82 e7 5c 55 47 f2 85 dc 63 a3 36 ea 5e 6f 1a e5 c3 11 f7 dd 5f 12 ce 55 f5 01 be 98 f2 f1 56 4a 0f fe cb 9b 46 f9 70 c4 e8 87 4a c6 b9 Data Ascii: (-\D8ERG>yrT5:_kNmRXw%AjX[_HA7KwM\|8#c_gynW~ssG('e8nsFt<g!wz*Nwq;tGa7^bo#\UGc6^o_UVJFpJ
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: d5 d3 8f d3 5b 69 a2 fc 72 ab f5 d3 f5 90 cf 81 f4 f6 5f 10 1c ab 34 3c d6 7c 4c ca c3 d1 e3 a8 76 25 39 1e 85 bd cd 97 40 70 5c a1 a4 ef 9e 5e 68 62 74 8a 12 22 e9 db 48 71 d3 6b ac 47 c3 35 eb 6f 72 3b 56 ee 10 93 84 a4 ab 1b cd 14 6b d2 b1 5d 53 f4 2e 39 90 9e 77 69 15 b3 da 35 0a 89 81 14 48 3f b1 80 a4 4f 5f f0 3c 0e 9d 1f 26 19 ea f2 9c b7 4b b1 6f 44 19 a1 29 5e d9 e8 b6 b6 c5 f3 4c ad 8b 94 8e 87 d7 51 91 ee 62 1d 9d 4b 4e 1c 48 37 3e dd 71 fa 2c ef 05 da 31 38 00 0e 04 92 f4 71 07 76 0f d0 ae 40 86 98 48 ba 3c 0b 1c 12 e9 f4 65 5d 09 2e d3 92 91 d7 c6 5a ec 60 92 74 d2 d5 ef 8c fe a1 25 e9 ba 9d 93 0e 6f 81 f4 a7 e5 9a 00 e9 a6 ff ca 1c c8 44 82 78 b6 e4 49 ff d4 be 0d 65 84 57 f0 c2 66 af 5c 79 86 50 fe f1 0f 09 fa 8f 53 65 c6 02 bb d0 f8 bb 8a Data Ascii: [ir_4<\|Lv%9@p\^hbt"HqkG5or;Vk]S.9wi5H?O_<&KoD)^LQbKNH7>q,18qv@H<e].Z`t%oDxIeWf\yPSe
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: c2 33 67 ba 7d 39 9e a9 20 43 ba 32 c8 7c 0b 17 91 73 24 7d a2 f2 7f 98 d6 38 d7 b8 10 8e d3 e5 25 a2 22 e9 39 ba 0a ef d3 3a 5c ca 67 a2 c4 a4 ab b3 1c 4a d5 7d 11 f8 08 e1 8b d5 86 a7 c9 c7 ef 8c d9 62 be 16 49 e4 d0 1d e9 2b e0 9e d2 ce 0a 9d c4 c5 d9 41 dd b4 6f 74 23 cb d6 0c ab 80 97 f0 6e ed 20 ca 98 4b 34 81 37 80 25 5d 59 da 8c 0a e1 16 20 e9 5a fe af 31 f1 49 63 fc e7 68 91 cb 6c 55 e7 e6 f7 b0 ff 32 4f b7 df 84 83 74 98 ee b0 45 0d d4 61 cc 16 e0 2c d2 e1 9b 28 25 15 e7 03 e7 98 b6 26 b4 9f ab 7f 90 63 24 5d e8 29 8a a4 a7 42 37 4e ad aa 9f b6 41 c7 9a 3f f1 ec 09 2c cd 30 4e 20 e9 72 9c 3b 24 7d 9f 90 8a a4 3b b8 9c 08 a4 a3 97 30 31 9e fe 66 75 93 c0 ab 86 23 dd 1c 26 17 91 13 d3 f6 ae 0f be ee a6 6a 48 ba 3c a7 0d a4 e3 f3 9e 05 39 b2 30 9d Data Ascii: 3g}9 C2\|s$}8%"9:\gJ}bI+Aot#n K47%]Y Z1IchlU2OtEa,(%&c$])B7NA?,0N r;$};01fu#&jH<90
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 0c ef 70 19 96 94 65 0b 4a 88 f2 e9 e7 7b 83 f4 7b bc 6e ba e1 58 4f 61 bd de c4 82 74 26 98 ff 90 6c 29 03 3f f5 e8 5b e4 22 0c bc fb 8c 8d cb 83 4c fa 26 76 d3 97 44 69 c5 22 ef 19 e1 fd 0b cd 07 87 56 02 e9 e2 6c 2f 40 26 bd 02 97 52 b1 15 af ff 13 5f a4 38 5d e8 c3 6b f4 14 59 7f 51 d6 e1 49 af 4d 1d 4b 4d 8c e3 f5 f9 3d 61 9c 1d 62 7d 78 80 57 45 d2 2d de c6 3c e9 73 cc 45 41 14 a7 38 75 21 00 dc 81 70 35 c5 87 6b c8 81 26 a5 88 ef 3c e9 8d a4 bd 20 9a 71 da e2 86 4d e2 2a 73 1f 11 00 79 53 b6 8f 76 f1 1a 81 bc 61 39 4f ab 3a 42 90 61 fb c9 3b 1f de e1 94 cc 62 af 17 38 8d 00 a4 b3 91 bd 53 24 47 51 ff 87 1e 91 f8 c0 82 c8 06 af 31 0a 01 48 87 95 54 05 05 05 69 a3 df 5b 26 ed a2 ee ef ca 16 a1 90 3a 66 04 7f ae 33 e4 16 1e c7 0c 88 47 65 5a a3 19 33 Data Ascii: peJ{{nXOat&l)?["L&vDi"Vl/@&R_8]kYQIMKM=ab}xWE-<sEA8u!p5k&< qM*sySva9O:Ba;b8S$GQ1HTi[&:f3GeZ3
2024-10-23 22:50:41 UTC	660	IN	Data Raw: 1a 42 03 66 06 8e 39 a3 a1 80 0f 2c 9e 1e 38 47 d8 00 a4 83 09 6e c3 59 72 f8 27 15 d8 91 7e a1 2a 01 e3 ad ff ad 49 e7 97 b1 bb 22 5d 88 5f 89 9b 21 47 06 18 e3 0c 86 fa ff 9f 2e b0 b1 c8 15 58 c5 68 87 d1 1c 90 2e 6f 0c f0 f7 20 3d d8 e8 52 04 42 3c ca 72 65 5c c5 20 c0 5a e4 30 fe ba be 55 0c 90 fe dc ac 95 06 ea c3 06 85 f8 a5 ca 34 00 ee 31 e0 f0 09 a4 a7 7f cb 64 80 3d 1a fe b9 a4 ef e2 49 8f 20 33 14 67 86 85 e9 f4 78 dc 34 44 f6 9c b9 42 4b 5d 0a e6 8a f9 a9 06 0e 4d 25 09 64 0c 7f ae 94 01 06 64 ff 5c d2 93 f9 b0 91 0b 03 e7 08 17 38 d2 71 98 f1 2c 1c 5b fb c8 41 70 ed f6 52 01 64 1e 49 26 1d f6 51 fe e7 92 4e c3 93 e8 d8 11 38 43 b8 00 d6 76 23 1e 04 ae d5 06 cf 2e 79 d1 c7 64 45 79 1d 0e be e0 4a 80 6d d3 76 6a 1d 5c 29 03 f4 ea 0a c8 83 64 11 Data Ascii: Bf9,8GnYr'~*I"]_!G.Xh.o =RB<re\ Z0U41d=I 3gx4DBK]M%dd\8q,[ApRdI&QN8Cv#.ydEyJmvj\)d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	49760	151.101.2.133	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:40 UTC	467	OUT	GET /companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJwmIJnoCKF6Zs4y4XbygGbcJe6v.jpg?width=500 HTTP/1.1 Host: images.cloud.realogyprod.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:41 UTC	794	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13097 Content-Type: image/png Etag: "NP07Z45sucicdCfGra06uGXPGuizDtRiORAAcWe49dU" Fastly-Io-Info: ifsz=14375 idim=500x117 ifmt=png ofsz=13097 odim=500x117 ofmt=png Fastly-Io-Served-By: vpop-haf2300712 Fastly-Stats: io=1 Server: AmazonS3 X-Amz-Id-2: NyqajwM2XZWU/rvFQ8gjeyiiXDMJa895vhBWbpe82Kx1sYaNTJp+tgacN9zN/LLQbRIQWMloEiusUQUKjc37jQ== X-Amz-Request-Id: 3HX5KJD6BXJG8S13 X-Amz-Server-Side-Encryption: AES256 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2645 Date: Wed, 23 Oct 2024 22:50:40 GMT X-Served-By: cache-bfi-kbfi7400031-BFI, cache-dfw-kdfw8210100-DFW X-Cache: HIT, HIT X-Cache-Hits: 99, 0 X-Timer: S1729723840.480100,VS0,VE1 Vary: Accept Cache-Control: max-age=7200 access-control-allow-origin: *
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 00 75 08 06 00 00 00 b8 4d 13 43 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ed 9d 77 78 14 d5 da c0 7f b3 e9 bd 11 08 49 28 09 45 10 41 44 10 45 6c a8 d8 15 3b ca 77 45 d4 2b 62 ef 60 bb 56 f4 a2 a2 62 ef d8 41 05 1b 36 f0 8a f7 62 c1 0a 2a d2 7b 0f 49 20 84 84 b4 2d f3 fd f1 ee 9a cd 66 76 77 76 b3 25 09 e7 f7 3c fb 24 7b f6 cc 99 b3 65 e6 3d e7 ad 9a 56 34 61 0b 50 00 ec 41 d1 d6 49 07 4a 81 be c0 ae 28 cf 45 a1 50 28 14 11 24 16 48 73 fe 9f 1e cd 89 28 42 46 1a a0 45 7b 12 0a 85 42 a1 88 2c 96 68 4f 40 a1 50 28 14 0a 45 cb 89 6d f2 4c d3 c0 a1 a3 57 d5 82 c3 21 cf 15 ad 13 5d 07 8b 05 2d 2d 11 2c 16 79 ae 50 28 14 8a 7d 96 26 02 5d 77 e8 68 1a 24 e5 a6 11 17 1b Data Ascii: PNGIHDRuMCsRGB IDATxwxI(EADEl;wE+b`VbA6b*{I -fvwv%<${e=V4aPAIJ(EP($Hs(BFE{B,hO@P(EmLW!]--,yP(}&]wh$
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 73 1f 82 5b 94 9d 04 bc 0b 0c 07 fe 0c 72 0e d7 03 8f d3 f8 3d 14 00 f3 80 33 3c fa 1d 09 7c 8a 5c cb 36 20 0d f9 3c 8e 01 b6 fa 18 df 82 7c af c3 80 1d ce 36 1b b0 1f f0 16 f0 0f b7 be 6f 01 a3 91 cf 38 58 32 9c e7 39 0a d8 e9 d6 fe 1e f2 9e cc 6c 34 62 00 3b 72 2f f8 05 f9 ae 97 18 75 8c be 40 8f 8d 41 df be 0b aa 2b e9 7d cc c1 3c 3c e9 4c ce 18 39 b0 c5 c3 26 24 c4 71 da 71 07 72 da 71 07 52 7a df 68 ee 9a f6 19 2f 3e 3e 07 bd 6c 17 5a 51 be 2c 22 dc 77 c7 0d 36 76 ef de cb cb 93 2f e0 ec 53 87 50 51 b9 17 74 48 4a 8c 27 31 d1 7c 6c f9 b5 e3 46 70 ed b8 11 4d da ea eb ad d4 d5 5b b1 da ec 74 c8 4e e3 87 5f 56 71 c2 d8 67 a0 b6 01 e2 92 5a fc 5e 5b 21 dd 91 1f dd 51 7e fa 25 20 17 e6 91 c0 63 c8 c5 fc 72 00 e7 e9 85 5c 74 87 f8 eb 88 68 08 ee 71 3e ee Data Ascii: s[r=3<\|\6 <\|6o8X29l4b;r/u@A+}<<L9&$qqrqRzh/>>lZQ,"w6v/SPQtHJ'1\|lFpM[tN_VqgZ^[!Q~% cr\thq>
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 83 f6 0f 10 0f 61 7f 8c 04 36 99 e8 a7 90 9b f9 09 78 77 a0 fc 88 e6 ce 62 20 1a 97 40 04 fa 1d 06 6d 05 c8 f7 ff 68 00 e3 78 e3 19 64 71 7a 5f 08 c6 0a 86 99 18 6f 1e fe 87 7f 6d 94 27 6f 21 8b 9d 70 30 1d b9 ce bd 71 36 b2 40 f2 34 87 8c 47 34 33 35 91 53 65 c5 c6 a0 6f dd 09 31 1a ff 8b b2 30 77 71 c4 c1 3d f8 e8 83 5b a1 ae 01 7d 57 75 63 b5 34 5d 07 74 b4 5e dd a9 de b2 8b a1 07 de c8 33 ef 7c 1b f0 f8 1f cd ff 93 e2 7e d7 b3 ee d7 55 68 3d 8b d1 62 db 6d 98 9a b7 8b fe 4f c4 09 ec 11 8c bd b3 bf 40 84 ad b7 d5 fb 69 34 b5 11 79 53 27 ae 40 54 c0 8f 62 ec 21 bc 1c 11 24 13 bc 1c 7f 26 d1 15 e8 ae 15 9e cd f9 70 38 ff ee 46 42 fb 9e 40 6e 48 46 3b e0 54 e0 4e b7 e7 95 18 3b 46 9d 8e 68 46 3c b9 12 37 95 9d 1b 97 62 ac 56 3f 13 e3 48 02 33 bb 73 45 e0 Data Ascii: a6xwb @mhxdqz_om'o!p0q6@4G435Seo10wq=[}Wuc4]t^3\|~Uh=bmO@i4yS'@Tb!$&p8FB@nHF;TN;FhF<7bV?H3sE
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 95 dd 9b 77 a2 65 49 d2 29 dd ee 80 98 44 8e 19 66 2c d0 67 7f b1 88 aa ea 5a 2e 3e b7 79 2e 8e 11 c3 fb 40 56 26 d4 59 21 21 1c 8b d1 a8 53 6c d0 56 87 24 95 08 25 de 62 c5 fd 65 3f f3 c5 42 9a 0b 74 33 02 ae 35 60 94 de 34 cb e3 f9 af 88 5a d1 f3 e2 3f 09 11 e8 46 f6 f1 8d 48 28 9f fb 58 3d 90 dc 00 2b 68 be 68 00 ef 6a 4d 6f 04 6a 93 7d 89 7d 57 a0 83 44 76 98 e5 2c 64 01 e0 8f 14 8c 6d cb 9f 20 da 2b cf df 57 3a a2 9e 37 f2 86 f7 c7 3a 24 75 eb 15 06 af ed 87 38 7d 0e c5 7f 2a 64 33 ec 40 16 9f 46 42 bb 9c e0 9c e0 3c 39 84 c0 92 59 6d c5 bc 40 37 63 9b 7d 08 63 3b fe cf 10 4e 95 bb 45 83 8d 3b 38 f2 d4 43 b8 68 f4 70 53 87 cc f8 f4 57 46 9f 74 37 c4 c5 a1 f5 2a 6c 2c 92 12 0c 36 3b 5a f7 4e 90 96 ca a5 e7 3c c4 07 f3 7e f7 7b c8 e7 df fc c5 de da 06 Data Ascii: weI)Df,gZ.>y.@V&Y!!SlV$%be?Bt35`4Z?FH(X=+hhjMoj}}WDv,dm +W:7:$u8}d3@FB<9Ym@7c}c;NE;8ChpSWFt7l,6;ZN<~{
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: c9 cb ef 2b b4 23 d8 50 b5 19 a8 d4 af 66 d1 69 34 6b 19 99 b7 7e 41 12 3b ad a4 e9 bd 3c 13 89 f3 f6 5c 94 5d 8b f1 42 ea 2b e4 fa 3b 10 59 28 d4 22 95 c7 8c 72 19 5c 85 ec e6 5b 52 99 ec 77 64 11 f2 03 2d 2f 47 ec 4e 17 c4 cc b4 1a e3 cd c6 e1 c8 8e b6 25 31 f0 bf 22 a6 a6 68 52 8d 2c cc 5e f4 7c 21 f4 2a 77 0d a8 a8 e4 f8 23 fa 92 99 e5 7f 47 fa c4 33 5f 40 c5 4e 29 58 12 ce 4c 6a 76 07 5a cf ce bc f2 e6 b7 5c 76 e6 bf 21 35 09 ad 57 17 59 62 79 59 48 68 59 a9 fc b1 62 1b f7 dc f0 1a 24 c5 a3 f5 ca 97 be be e6 a9 f3 f7 6e 9d fc 5c 1e b9 fd 6d be fe df 32 b4 4e fe 36 24 6d 96 8f 0d da 0e 22 f0 cc 6b fd 10 95 f7 3c a4 96 b2 27 1f 19 b4 15 d3 bc 86 b1 3f 32 30 4e 21 5b 8d 54 2e 6a ed 4c c0 58 ed f9 b5 97 fe 36 7c c7 25 6f c3 b8 38 85 bf 62 1a 46 71 ee 8a Data Ascii: +#Pfi4k~A;<\]B+;Y("r\[Rwd-/GN%1"hR,^\|!*w#G3_@N)XLjvZ\v!5WYbyYHhYb$n\m2N6$m"k<'?20N![T.jLX6\|%o8bFq
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: b2 7a fd 0e df bb 2f 33 e5 07 1f c5 7b d9 c3 ed ce f3 7c 4f f3 d0 94 40 cf f3 14 c6 49 36 42 4d 20 55 e7 cc b2 14 b9 b1 18 65 8d 33 62 25 e2 cd 7c bc f3 f9 6b 98 f3 36 7f 86 a6 02 3d d0 54 af a1 20 9c 2b 65 9b ff 2e 01 e1 20 fa fa ba c9 6e ff df 88 f1 a2 f6 3a 02 4b 9d 9c 4e f3 52 bb ff 40 16 c4 de 22 2c 82 61 32 22 9c 42 6d e3 1e 8f ec d4 8d 9c e5 1e 47 84 fa ab 21 3e a7 0b 07 2d ff 0d 3f 8c 5c ef 27 79 b4 e7 22 1a ba 53 21 c4 36 74 91 63 1a dd 4d 08 f4 15 1b cb 70 94 ef 69 d3 39 ce 33 d2 93 79 e4 d6 51 6c 59 f9 14 03 47 1c 88 be 76 a3 e4 af 6f df 36 73 5f fc 85 ec 92 83 75 72 71 20 aa 37 7f d5 9d d6 21 39 c6 cd 26 4d 31 62 2c a1 ad f5 1c 49 1e 43 ca 66 06 5a cf d9 bd 16 b5 3f bb bb 8b b5 34 aa f4 97 d1 98 4d ac bd d1 5e 2e da 9b 69 8c 08 e9 89 24 83 f1 Data Ascii: z/3{\|O@I6BM Ue3b%\|k6=T +e. n:KNR@",a2"BmG!>-?\'y"S!6tcMpi93yQlYGvo6s_urq 7!9&M1b,ICfZ?4M^.i$
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 57 d6 d0 b3 5f 21 19 16 0d 7d 67 15 c4 9a 49 fb 2d c8 2c e3 79 ef 33 ff 99 13 53 d3 93 c9 ce 49 85 06 6b d0 d3 55 28 14 0a 85 c2 0c a1 b7 a1 eb 40 62 32 9f cf 5f ca 63 f7 f8 ee aa a1 31 7e cc 11 4c ba e9 05 74 2d 07 2d 02 45 4d f4 bd f5 50 d7 c0 7f 67 df c2 92 75 a5 9c 74 c4 6d e8 0d 36 b4 fc 6c 73 d5 d2 74 1d 32 d3 58 b4 7a 3b 55 55 b5 a4 f9 29 2e 93 95 96 04 b6 7d 3e b9 8c a2 6d d2 1f c9 60 a5 54 4c 6d 1f 0d c9 82 f6 27 81 65 4b 54 b4 21 c2 93 29 2e 37 83 95 3f af 66 fe 82 a5 8c 38 b2 9f cf ae 57 4d 38 81 69 2f 7c c5 f6 8d e5 50 98 2d 61 6c e1 22 36 06 b6 6f e2 ec 31 c7 53 90 9f 43 41 7e 0e ef cf bd 87 73 4f 7a 00 7d 63 19 5a f7 5c b0 9a 10 ea f1 b1 ec ae ac a1 b4 7c 8f 5f 81 5e 6f b5 ed cb 79 dd 15 6d 9b 37 68 5e 43 5d d1 b6 39 15 f8 2c da 93 50 84 87 Data Ascii: W_!}gI-,y3SIkU(@b2_c1~Lt--EMPgutm6lst2Xz;UU).}>m`TLm'eKT!).7?f8WM8i/\|P-al"6o1SCA~sOz}cZ\\|_^oym7h^C]9,P
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 81 11 40 29 f2 fd ed 87 7c 3e 4f 05 39 47 45 2b 20 72 02 1d c0 e1 40 4b 4d 44 ef dc 99 47 ef 7a 95 0d 9b 77 f2 fe 0b 57 44 74 0a 2e ec 0e 9d 13 c6 3c ce d7 33 e7 01 36 4e bb e8 74 de 7a e6 f2 a0 c7 3b a4 5f 01 8b 97 bc c0 ff 4d 78 91 a5 ff 5b 0c 5d 0b d1 e2 62 c2 9b 9b 5e a1 08 1d 27 02 81 a9 cd 84 2a e0 0e fc 0b 82 93 11 81 de 12 0e 20 38 81 3e 14 78 0e 98 08 3c 1c c4 f1 fb 23 69 70 dd 79 19 f3 02 fd 4c e0 a8 20 ce eb c9 a7 88 40 df 04 8c 74 3e 5c 8c 06 96 02 fe eb 3a c3 a1 c0 f3 06 ed af b4 74 82 8a e8 12 f9 8c 27 76 07 5a 72 3c 74 ed c6 ac 17 e7 d0 e7 f0 db 59 b7 65 67 44 a7 f0 d3 9f 1b c8 1f 78 23 5f cf fc 1c d0 19 7d f5 68 3e 79 fd da 16 8f 3b b0 6f 17 fe fa ef fd 5c 38 e1 34 d8 b4 19 bd c1 ae 0a b3 28 da 0a b5 41 1e 97 06 3c 09 cc f3 d3 af 26 c8 f1 Data Ascii: @)\|>O9GE+ r@KMDGzwWDt.<36Ntz;_Mx[]b^'* 8>x<#ipyL @t>\:t'vZr<tYegDx#_}h>y;o\84(A<&
2024-10-23 22:50:41 UTC	1379	IN	Data Raw: 1a 42 ac d5 b3 d9 a1 47 3e ab ff 58 c1 73 cf cf e5 aa 2b bc 6d 04 84 d3 8e 1f c0 93 53 e7 a0 5b 6d 68 21 ac f3 ae 50 b4 02 32 0d da f6 9a 38 ce 41 f8 04 fa 49 34 17 60 2b 81 2e 34 da ab b3 81 6b 10 7b 73 7b 60 22 30 d7 a3 ed 06 24 76 dd 68 71 73 73 d8 67 a4 88 38 6d 42 a0 1b 52 db 40 72 5e 26 13 af 3c 91 e4 a4 78 9f 5d 75 08 79 e8 98 a6 83 4e 12 ef 7e f6 9b 5f 81 3e 64 40 37 b2 8a 3a 52 b1 bd 02 32 53 42 3b 11 85 22 ba 18 25 a3 59 65 e2 b8 0e c0 74 c4 bb da d7 05 6c 71 f6 bd 1f 58 68 72 4e 93 3c 9e ef 45 84 fc 0b 48 78 9d 8b 9b 9c 6d a5 26 c7 6d cd cc 03 5e 03 2e 76 6b eb 83 64 d7 eb e4 d1 f7 2d e0 b3 88 cc 4a 11 51 da ae 40 8f 36 ba 0e 1d d2 f9 65 d9 16 76 94 56 d2 a9 63 86 d7 ae 19 99 a9 14 15 75 a4 62 4d 89 12 e8 8a b6 82 1d ff c9 53 ae 03 3c f3 37 2f Data Ascii: BG>Xs+mS[mh!P28AI4`+.4k{s{`"0$vhqssg8mBR@r^&<x]uyN~_>d@7:R2SB;"%YetlqXhrN<EHxm&m^.vkd-JQ@6evVcubMS<7/
2024-10-23 22:50:41 UTC	686	IN	Data Raw: c9 c6 66 66 4c 23 e2 90 a4 30 2e 3e 07 be 71 b6 c5 38 1f 1b 82 1c 7b 36 d0 db 39 86 c3 f9 37 11 b9 3f da 10 7b f9 01 88 53 5e 30 c4 23 61 80 9e d4 20 d1 01 f1 88 4d 3f 9e d0 e5 94 3f 0f 51 f3 5b 69 fe d9 29 da 29 4a a0 87 98 2b ee 7a 87 17 1e 98 09 99 99 68 b9 19 4a 98 2b da 0a a5 04 57 46 b4 16 58 ee d1 b6 2e 84 e3 7b 63 45 08 c7 b2 01 ab 7d bc 5e 05 2c 0d e1 f9 5c e8 98 ab 4c 17 0c ed 35 41 8e c2 07 4a a0 87 88 59 5f 2c e2 aa 49 6f 51 fa e7 4a c8 cf 47 4b 4e 50 c2 5c a1 50 28 14 11 43 09 f4 16 b0 66 43 29 ef 7d fe 1b 2f ce f8 9e 8d df 2d 81 84 24 e8 59 84 e6 d0 95 13 9c 42 a1 50 28 22 4a db 15 e8 f1 b1 34 58 ed cc fa fc 37 72 32 53 a8 ae 09 36 69 8c 7f 62 2c 1a 56 9b 83 f2 dd 35 ec ac a8 62 d5 ba 52 7e 59 b6 85 35 7f 6c 80 f2 32 48 48 85 ee 05 68 31 9a Data Ascii: ffL#0.>q8{697?{S^0#a M??Q[i))J+zhJ+WFX.{cE}^,\L5AJY_,IoQJGKNP\P(CfC)}/-$YBP("J4X7r2S6ib,V5bR~Y5l2HHh1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	49762	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:50:41 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64500 Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 22:50:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.10	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225041Z-r197bdfb6b4h2vctng0a0nubg80000000a100000000078e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.10	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225041Z-15b8d89586f4zwgbz365q03b0c0000000dhg00000000h9a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.10	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225041Z-16849878b786wvrz321uz1cknn00000006vg00000000f97s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.10	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225041Z-16849878b785f8wh85a0w3ennn00000006x0000000001nz8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.10	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225041Z-15b8d89586f8nxpt5xx0pk7du800000003xg00000000nqa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.10	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225042Z-16849878b786vsxz21496wc2qn00000006yg00000000brt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.10	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 6177d94c-d01e-0028-6bfc-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225042Z-r197bdfb6b4sn8wg20e97vn7ps0000000nf0000000006qfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.10	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:42 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f9fc18b-f01e-0096-2cf2-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225042Z-r197bdfb6b49q495mwyebb3r6s00000009v000000000dkp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.10	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225042Z-15b8d89586flspj6y6m5fk442w00000003ug00000000ggd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.10	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:42 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:42 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225042Z-r197bdfb6b4rkc6mhwyt3e61pc00000000qg00000000suc6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.10	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225044Z-16849878b785f8wh85a0w3ennn00000006q000000000zsvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.10	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225044Z-15b8d89586flzzks5bs37v2b9000000002f000000000747x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.10	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225044Z-15b8d89586f989rks44whx5v7s0000000d8g00000000bkd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.10	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2d77a7fe-501e-0064-68ef-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225044Z-15b8d89586f6nn8zquf2vw6t54000000040g00000000an1b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:44 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.10	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225044Z-16849878b78p4hmjy4vha5ddqw00000006v0000000001ga5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.10	49781	104.18.11.207	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	595	OUT	GET /bootstrap/3.2.0/js/bootstrap.min.js?ver=782b628426a895c0dfd7727f0e7fb402 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"abda843684d022f3bc22bc83927fe05f" Last-Modified: Mon, 25 Jan 2021 22:03:57 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/05/2023 05:58:51 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 7b70b9868f130848f608ae411e52c8bf CDN-Cache: HIT CF-Cache-Status: HIT Age: 18792320 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d7549ac090eb78c-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 22:50:44 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a Data Ascii: 7bff/! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires j
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 73 74 79 6c 65 5b 63 5d 29 72 65 74 75 72 6e 7b 65 6e 64 3a 62 5b 63 5d 7d 3b 72 65 74 75 72 6e 21 31 7d 61 2e 66 6e 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 21 31 2c 64 3d 74 68 69 73 3b 61 28 74 68 69 73 29 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 30 7d 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 7c 7c 61 28 Data Ascii: sition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 64 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 61 6c 65 72 74 3d 65 2c 74 68 69 73 7d 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 63 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 29 2c 65 3d 64 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: d,a.fn.alert.noConflict=function(){return a.fn.alert=e,this},a(document).on("click.bs.alert.data-api",c,d.prototype.close)}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 61 28 63 2e 74 61 72 67 65 74 29 3b 64 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 64 3d 64 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 29 2c 62 2e 63 61 6c 6c 28 64 2c 22 74 6f 67 67 6c 65 22 29 2c 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 Data Ascii: n("click.bs.button.data-api",'[data-toggle^="button"]',function(c){var d=a(c.target);d.hasClass("btn")\|\|(d=d.closest(".btn")),b.call(d,"toggle"),c.preventDefault()})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 69 6e 64 65 78 28 61 7c 7c 74 68 69 73 2e 24 61 63 74 69 76 65 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2c 64 3d 74 68 69 73 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 24 61 63 74 69 76 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 69 74 65 6d 2e 61 63 74 69 76 65 22 29 29 3b 72 65 74 75 72 6e 20 62 3e 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 30 3e 62 3f 76 6f 69 64 20 30 3a 74 68 69 73 2e 73 6c 69 64 69 6e 67 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 74 6f 28 62 29 Data Ascii: ),this.$items.index(a\|\|this.$active)},c.prototype.to=function(b){var c=this,d=this.getItemIndex(this.$active=this.$element.find(".item.active"));return b>this.$items.length-1\|\|0>b?void 0:this.sliding?this.$element.one("slid.bs.carousel",function(){c.to(b)
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 64 54 61 72 67 65 74 3a 6a 2c 64 69 72 65 63 74 69 6f 6e 3a 67 7d 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 73 6c 69 64 65 22 29 3f 28 65 2e 61 64 64 43 6c 61 73 73 28 62 29 2c 65 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 64 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 65 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 64 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 62 2c 67 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 64 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 61 63 74 69 76 65 22 2c 67 Data Ascii: dTarget:j,direction:g});return a.support.transition&&this.$element.hasClass("slide")?(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),d.one("bsTransitionEnd",function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 20 62 26 26 65 5b 62 5d 28 29 7d 29 7d 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 63 2e 44 45 46 41 55 4c 54 53 2c 64 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 26 26 28 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 61 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 67 67 6c 65 26 26 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 7d 3b 63 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 32 2e 30 22 2c 63 2e 44 45 46 41 55 4c 54 53 3d 7b 74 6f 67 67 6c 65 3a 21 30 7d 2c 63 2e 70 72 Data Ascii: b&&e[b]()})}var c=function(b,d){this.$element=a(b),this.options=a.extend({},c.DEFAULTS,d),this.transitioning=null,this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};c.VERSION="3.2.0",c.DEFAULTS={toggle:!0},c.pr
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 5b 63 5d 28 29 29 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 31 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 30 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 68 69 64 64 65 6e 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: ement[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse").removeClass("in"),this.transitioning=1;var d=function(){this.transitioning=0,this.$element.trigger("hidden.bs.collapse").removeClass("collapsing").addClass("collapse"
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 61 72 20 63 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 63 7c 7c 28 63 3d 62 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 63 3d 63 26 26 2f 23 5b 41 2d 5a 61 2d 7a 5d 2f 2e 74 65 73 74 28 63 29 26 26 63 2e 72 65 70 6c 61 63 65 28 2f 2e 2a 28 3f 3d 23 5b 5e 5c 73 5d 2a 24 29 2f 2c 22 22 29 29 3b 76 61 72 20 64 3d 63 26 26 61 28 63 29 3b 72 65 74 75 72 6e 20 64 26 26 64 2e 6c 65 6e 67 74 68 3f 64 3a 62 2e 70 61 72 65 6e 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 64 3d 63 2e 64 61 74 61 28 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 29 3b 64 7c 7c 63 2e 64 61 74 61 28 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 Data Ascii: ar c=b.attr("data-target");c\|\|(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.(?=#[^\s]$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}function d(b){return this.each(function(){var c=a(this),d=c.data("bs.dropdown");d\|\|c.data("bs.dropdown"
2024-10-23 22:50:44 UTC	1369	IN	Data Raw: 69 2e 65 71 28 6a 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 7d 7d 7d 3b 76 61 72 20 68 3d 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3b 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3d 64 2c 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 67 2c 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3d 68 2c 74 68 69 73 7d 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 62 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 22 2e 64 72 6f 70 64 6f 77 6e 20 66 6f 72 6d 22 2c 66 Data Ascii: i.eq(j).trigger("focus")}}}};var h=a.fn.dropdown;a.fn.dropdown=d,a.fn.dropdown.Constructor=g,a.fn.dropdown.noConflict=function(){return a.fn.dropdown=h,this},a(document).on("click.bs.dropdown.data-api",b).on("click.bs.dropdown.data-api",".dropdown form",f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.10	49783	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	645	OUT	GET /images/customarea/responsive/default/background/external/nature4.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	462	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 00:37:03 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:17 GMT content-length: 193486 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 00:37:03 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout12-pr x-varnish: 244616954 866910823 age: 80021 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:44 UTC	1031	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 03 03 04 03 05 04 04 05 07 05 04 05 07 09 07 05 05 07 09 0a 08 08 09 08 08 0a 0d 0a 0a 0a 0a 0a 0a 0d 0a 0c 0d 0e 0d 0c 0a 10 10 11 11 10 10 17 17 17 17 17 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff db 00 43 01 06 06 06 0b 0a 0b 14 0d 0d 14 16 12 0f 12 16 1b 1b 1b 1b 1b 1b 1b 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 04 9e 08 98 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 01 01 00 03 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 ff c4 00 5d 10 00 02 02 00 04 03 04 06 04 0b 03 07 08 08 03 09 00 01 02 11 03 12 21 31 04 41 51 05 13 61 71 06 07 14 22 81 91 32 a1 b1 d4 08 Data Ascii: JFIFHHCC]!1AQaq"2
2024-10-23 22:50:44 UTC	13032	IN	Data Raw: 84 41 39 0c da 0a 22 4b 6a 8c b5 6c de a5 2d ab 64 a5 b1 62 8b 3a 7c 42 8d 1f ef 00 ca fa 81 15 95 98 51 b3 36 d9 59 b4 a6 93 da ec 94 bb 07 be ba 16 99 d8 a4 82 b5 5a 11 59 2a 35 a9 1a b4 82 59 d5 2f 02 d2 4e 4c 59 69 ce d9 93 29 6c 36 ec a8 39 06 64 72 09 49 b2 8c f3 08 39 68 82 b3 7f 32 a5 8a d7 50 32 10 80 6f b6 88 03 4b 28 da 22 b2 54 3c 88 2b 14 58 61 a9 14 8a 85 a7 b2 04 ad 3e 24 03 ad 82 0e 55 54 14 3f e9 0a 05 7c ca 8a ad 30 a2 ab e2 51 3d df 81 10 56 d6 55 b4 2c 57 a6 a4 41 e2 05 cc a8 fb a7 a4 6f fc e0 ed 1f f7 ac 7f ef 19 f9 e8 7e b6 27 d9 f1 ac d5 25 86 cb 49 32 af 62 b3 6a 9e c0 39 41 10 94 75 0b 4d 64 25 b5 ab 4b 0f 41 6d 6a bb bd c2 6a 74 00 75 f1 2b 32 02 97 c8 23 36 8b 49 6b 4a 2b 36 1c 97 23 54 cc e4 1e 20 d5 9d c2 71 2a 6c 9d 05 67 44 Data Ascii: A9"Kjl-db:\|BQ6YZY5Y/NLYi)l69drI9h2P2oK("T<+Xa>$UT?\|0Q=VU,WAo~'%I2bj9AuMd%KAmjjtu+2#6IkJ+6#T qlgD
2024-10-23 22:50:44 UTC	2896	IN	Data Raw: b3 c8 ca 83 4c da 49 04 88 5c 80 9f cc 29 e4 45 b4 ec a8 33 2f 88 2d 57 88 4a 49 02 8b 5b 10 95 4b 70 2a e6 45 5f 60 55 45 12 44 12 88 51 96 44 5a 34 11 50 15 5e c5 29 5f f2 64 6a 0a ba 44 68 81 2f 2a 2a 5a cb fe 05 44 03 b7 f0 02 bd 75 09 62 b7 a2 86 88 02 06 be 0c 01 ff 00 48 25 2d 0a 51 69 b0 aa 95 df d4 12 95 6c 54 49 2a 40 29 20 94 72 e8 51 51 12 92 48 2a 7e 05 24 34 b9 ee 11 29 7c ba 11 57 2d b4 45 28 90 a2 b5 29 4d 65 b6 44 91 28 f3 65 4a 4d 12 cd 59 7d 44 b7 10 39 11 69 ad 09 65 2d 28 08 0d 24 ee d1 42 a2 88 89 5d df d4 06 aa f9 05 a6 68 40 97 cd b2 a1 69 11 57 bb 44 06 5d 0a b4 14 79 04 6f 90 4a 4c 08 a8 9f d4 0a 3a 02 8a d8 12 82 53 54 09 3f 52 0a 98 25 79 12 46 43 4d 33 22 d3 e0 16 8f 91 45 e2 40 d0 55 97 c4 89 4d 50 29 51 1b 41 55 10 22 d2 92 Data Ascii: LI\)E3/-WJI[KpE_`UEDQDZ4P^)_djDh/ZDubH%-QilTI@) rQQH*~$4)\|W-E()MeD(eJMY}D9ie-($B]h@iWD]yoJL:ST?R%yFCM3"E@UMP)QAU"
2024-10-23 22:50:44 UTC	4344	IN	Data Raw: 2d c4 b6 cc c0 cb 5e 42 64 88 0e 3a 12 d6 99 49 74 2d 94 5f 88 b3 56 9a 25 ad 32 c1 43 22 0b 4c 65 88 46 5a df a9 51 50 42 d2 10 24 9f c4 d2 4c 2a 05 1c be 26 4a 61 c3 f9 16 d6 71 14 ac 32 32 94 98 6a b4 dc 25 27 a1 ab 66 8e 52 14 cd 15 0a 5a 0b 28 d7 33 50 04 8b 6c d2 cb a1 59 55 e0 54 4f c8 23 2d 24 56 66 02 45 4b 2f a8 56 6b a9 51 a4 8c ad 0d 11 52 85 68 16 95 01 51 2d 01 a0 30 8a be 00 0d 6a 06 59 a4 44 07 ee 01 d5 85 5b 84 14 15 53 00 ca f5 01 dc 01 a7 7a ea 44 1e 1c ca 35 ae da 11 b8 34 ac 0a 9e 8b 6e 81 a5 a6 a4 15 68 46 96 a0 37 a5 12 9a b3 19 18 9c 5b 8c 8b 6c 52 ec 2b 5f 00 5a 14 59 52 33 4d ec 51 1a 89 6b 4d 9a 23 6c a8 82 83 8b b2 db 1a b2 fe d2 a0 35 4c 4c 81 49 60 aa 19 58 96 6c d3 36 b7 02 ae bb 00 04 62 46 d8 95 f5 84 b0 c1 32 cb 76 69 9b Data Ascii: -^Bd:It-_V%2C"LeFZQPB$L*&Jaq22j%'fRZ(3PlYUTO#-$VfEK/VkQRhQ-0jYD[SzD54nhF7[lR+_ZYR3MQkM#l5LLI`Xl6bF2vi
2024-10-23 22:50:44 UTC	16384	IN	Data Raw: 28 a5 a2 d3 3b 2e 65 a0 b4 40 38 f3 22 b2 d5 00 51 46 7b b6 f6 16 94 72 7c 8a b4 b2 7c 7c 42 14 9e e0 91 f6 22 c2 1f 89 51 ab d4 b4 cd 8d 37 2c 42 2e 60 0f 63 50 cd 84 19 b1 9b a7 f4 cb 49 6c 3b b3 4c c8 a3 4c aa 22 8a 68 d3 23 fa b0 2a 74 46 95 04 a1 5b 85 a5 fb c9 6b 49 58 29 56 84 b5 a4 e1 cb 91 6d 75 19 4c da e8 a8 5a ce 2b bb b2 ec ce ab bb ea 4b 5d 46 4e 62 d7 55 91 b6 2d 75 4e 1a ec 4b 4d 56 5d 75 16 ba aa f9 8b 35 39 69 0b 6a 97 20 2a 2a 00 32 ea c3 2c f9 1a 66 c0 4a 54 c2 94 99 25 a8 c5 af 22 34 2a c8 53 4a 35 b9 26 5b 85 44 03 fb 0a 92 35 34 8c dd 96 98 99 54 56 40 16 9b b0 31 5a 9b 61 97 1f 3a 29 42 56 58 66 65 8e 46 9c e4 36 f6 e6 54 96 3e 25 61 25 b8 19 df 42 a4 b3 e4 69 95 b6 ff 00 22 28 ad 7c 4a 20 8b 42 0a 90 69 72 f2 22 26 52 c6 fe 45 41 Data Ascii: (;.e@8"QF{r\|\|\|B"Q7,B.`cPIl;LL"h#tF[kIX)VmuLZ+K]FNbU-uNKMV]u59ij 2,fJT%"4SJ5&[D54TV@1Za:)BVXfeF6T>%a%Bi"(\|J Bir"&REA
2024-10-23 22:50:44 UTC	5336	IN	Data Raw: 04 c2 e7 45 46 95 95 14 90 57 39 6f a9 10 5a 00 8b 28 d5 f5 2a 04 d0 43 98 06 2f 50 53 79 81 43 5f 91 52 61 a8 bb d3 91 55 d3 90 40 c0 ce ec 8d 30 c8 b0 2d 73 d8 c3 6e 72 7a 95 4e 84 28 a7 4f cc cc ba 63 92 f1 e4 65 a3 a0 2c c5 ae 7f 12 ca 58 ce 4a 6a cc 5f 4e 64 a5 b6 94 89 30 d4 64 6c c5 3a 44 b5 ee e8 46 f6 82 dc 79 12 09 ca 02 66 8b 3a 78 91 19 08 1a 46 99 a1 93 a9 2d 62 16 51 6b 4b 2b 2d b3 4d 65 ea 0d 4e 5f 99 16 95 2b 21 46 82 b5 5f 22 29 ae a8 28 7b 69 b1 59 96 52 4c d3 23 40 8a d5 68 5a 66 d8 f7 99 b6 26 59 d4 ac bc 3e 91 bf f3 87 b4 bf de f1 bf bc 67 ab 19 f6 87 cf 9f 97 81 3a 35 65 35 7f 22 5a d1 4a d5 6c 55 a1 a2 66 49 0e 8a b0 2a d9 96 a0 e5 5b 11 a5 5f 59 96 a8 a6 93 a1 68 d2 4f 91 ab 44 e9 2a e6 4b 14 75 0a 9a d4 a9 32 72 f3 f9 b0 cd 98 c5 Data Ascii: EFW9oZ(C/PSyC_RaU@0-snrzN(Oce,XJj_Nd0dl:DFyf:xF-bQkK+-MeN_+!F_")({iYRL#@hZf&Y>g:5e5"ZJlUfI[_YhOD*Ku2r
2024-10-23 22:50:44 UTC	5792	IN	Data Raw: 3d 30 81 2c d1 d2 31 4b 72 ec 93 83 5b ec 5d 93 41 48 6c 9a 2a b7 b0 d9 63 02 b0 db 16 b3 83 a6 42 6c 9d 61 e1 eb a8 b6 b4 39 3c 35 25 b5 18 9c 9c da 25 b5 38 2c 88 b6 ce ab 21 2d 75 2a 24 b6 a9 65 40 35 f1 2b 33 23 2f c8 b6 94 72 16 d3 54 b0 d9 6d 35 3d df cc b6 93 8a ee b6 16 9a a5 11 69 4b bb 16 94 72 ae 60 56 82 db 9c a7 46 e2 1c f2 cd 8e f1 9d 29 ce 72 0e 4c 53 3b 32 e4 e8 b4 9b b3 9e 8b ab 3b ac fa 92 97 72 9e 84 a2 c0 a5 b1 f6 04 b1 c8 09 f4 0b 4c 38 b2 db 34 f3 7a 44 bf ce 0e d1 d7 ff 00 4a c7 fe f1 9e 9c 7e 21 e1 fc de 18 ff 00 81 a0 eb 41 02 f0 14 d1 a6 ff 00 90 a2 ca 5d 02 5b 49 2f e6 12 da ad 08 aa b5 aa 02 49 95 1a 4b 40 86 be 45 46 91 1b 89 3e 66 5a 34 46 a9 aa 0d 14 d2 39 cc 3a 63 2d 77 9a 98 9c 5d 37 6d 4d b7 66 75 6b 73 e6 5a 5b 66 f5 09 Data Ascii: =0,1Kr[]AHlcBla9<5%%8,!-u$e@5+3#/rTm5=iKr`VF)rLS;2;rL84zDJ~!A][I/IK@EF>fZ4F9:c-w]7mMfuksZ[f
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 77 65 14 70 48 b0 d7 77 4f 73 2e b1 2a 57 d0 51 96 4c c9 c9 ee b6 35 4c 6c ca 8a 6f 4d 0a c5 c0 96 1f f8 9a 87 39 72 6b 4e 85 46 69 8b 66 87 76 ed 33 56 cc b4 d3 ad 82 07 0d 74 2a 5a c8 a9 15 94 e9 27 d4 a8 94 79 d9 12 9a d9 95 29 66 fa ca 31 2f 00 ac b8 be 64 56 65 23 4c 4c b9 b9 72 0c 8c df 31 65 2c c5 b4 a2 a4 5b 29 b5 7b 82 20 e5 e6 0a 0d 12 d6 96 4d 08 ad 28 78 06 9b 4b 4a 22 33 ad f4 2a 1f 88 59 4a 2f cc ac 07 77 a9 1a 0c a9 2c b5 be a1 95 b1 1a 81 f1 0a cb b4 cb 69 30 85 a5 2f 81 6d 29 6a 26 4a 5c c9 6d 44 1f 81 9b 74 8c 4a 25 ac 42 57 d4 2a 71 b6 4b 6a 89 2d 69 97 1b 2e c6 8d c3 0b a3 d8 cd b5 18 ba 43 a3 d0 5a d1 96 5e 6f 53 36 e9 10 e7 25 86 d9 26 5b 88 85 ec d0 7c cc ec dc 71 44 97 c2 47 9b f3 1b 93 c2 23 c3 a9 3f 21 b1 d5 0e f1 82 5b 19 b7 68 Data Ascii: wepHwOs.WQL5LloM9rkNFifv3VtZ'y)f1/dVe#LLr1e,[){ M(xKJ"3YJ/w,i0/m)j&J\mDtJ%BWqKj-i.CZ^oS6%&[\|qDG#?![h
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 9d 59 59 6f 62 db 34 9e 52 da d0 f7 42 50 d3 91 59 19 b5 2a 0c c8 23 36 8b 63 2e 5a 16 d9 a6 73 d1 52 92 97 32 22 b5 cc 59 4b 4e 65 28 5d 8b 26 15 f3 2d a5 1f b4 a5 0e 7e 04 4a 14 51 55 14 00 a4 fe 5d 50 49 0d 14 94 e3 7f b8 85 02 aa 08 02 be 3f d2 29 ff 00 9c 1d a2 bf f8 ac 6f fc ec f0 c3 ea be 3f 32 35 42 cc d1 b8 72 91 9b 99 59 17 e0 03 de 32 5b 51 0c e7 d4 9b 2e ab 37 41 19 24 e2 cb 96 a5 d9 35 1e 36 2c a5 9b c3 52 5a d3 95 7f 23 2d c4 0c 9c c2 a5 16 11 b8 61 89 20 e4 03 2e d1 07 36 9b 22 a6 f4 d8 dc 31 32 d2 ad be b3 4c 29 4a 83 34 cf 7c fe 3d 49 6d 53 3d e3 6f 7f dc 14 bc 77 65 40 b1 b5 2b 2c e2 e2 e6 68 58 e9 83 38 d1 59 12 c7 93 d0 cb 6a 38 8e ad eb e0 54 66 52 f0 0b 41 ef af 34 45 a6 48 8b 92 0a a2 9d 92 45 92 e4 16 9a ee 55 75 f0 0b 41 61 6b a8 Data Ascii: YYob4RBPY*#6c.ZsR2"YKNe(]&-~JQU]PI?)o?25BrY2[Q.7A$56,RZ#-a .6"12L)J4\|=ImS=owe@+,hX8Yj8TfRA4EHEUuAak
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 1e 0a f5 d4 96 d6 8f 3b e3 e0 a5 a2 26 cb d6 e9 df a9 2d 0b 69 ab 50 95 ad c5 9a 99 31 66 8c 59 2d ad 1a 4b e4 69 9d 4d 06 19 d0 aa 29 58 43 e6 14 00 36 04 40 32 a8 d8 22 d0 a0 d4 83 e1 3d 22 93 fc 7d da 2b ff 00 8a c6 fe f1 9f 2e 9f a7 8c bd 9f 18 e5 5b b3 45 b1 29 ab 2b 12 c3 c5 48 30 3b c7 5a 0b 6a 31 3b ff 00 03 36 de ab 3a 4a d9 1a a6 1e 22 dc 23 39 f9 f3 0b b1 d3 f9 8b 53 15 a7 41 66 ad c5 57 8b 33 32 e9 a9 73 7d 7c c0 94 fe 4c 0d 46 6d ef bf c8 8b 6d ac 46 81 67 be 0b 69 c9 3f 22 b0 aa 20 a0 e4 d1 59 99 61 e2 37 c8 b4 cd 8c cb a9 59 4a 61 2d bb bd 82 ab e6 06 74 a7 46 98 a4 9a 0c b5 99 11 a0 e5 1a 2a 4b 36 69 86 a3 3c a6 55 a5 3c de f3 2d 93 16 e8 b2 b2 db 3a 1b 8f 22 2c 43 9c 9c 11 a6 66 19 53 86 c1 95 51 d6 8c cc ba 46 2e bb aa a3 33 2e d1 88 cc Data Ascii: ;&-iP1fY-KiM)XC6@2"="}+.[E)+H0;Zj1;6:J"#9SAfW32s}\|LFmmFgi?" Ya7YJa-tF*K6i<U<-:",CfSQF.3.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.10	49782	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	606	OUT	GET /service/v1/auth/javascripts/iframelogin/jquery.iframelogin.min.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	283	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:44 GMT content-type: application/javascript content-length: 40504 server: nginx last-modified: Mon, 15 Jul 2024 18:05:41 GMT etag: "669564f5-9e38" accept-ranges: bytes x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:44 UTC	16384	IN	Data Raw: 2f 2a 0a 20 43 6f 6c 6f 72 62 6f 78 20 76 31 2e 34 2e 33 31 20 2d 20 32 30 31 33 2d 30 39 2d 32 35 0a 20 6a 51 75 65 72 79 20 6c 69 67 68 74 62 6f 78 20 61 6e 64 20 6d 6f 64 61 6c 20 77 69 6e 64 6f 77 20 70 6c 75 67 69 6e 0a 20 28 63 29 20 32 30 31 33 20 4a 61 63 6b 20 4d 6f 6f 72 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 63 6f 6c 6f 72 62 6f 78 0a 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 71 2c 75 2c 79 2c 58 2c 52 29 7b 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 5b 62 5d 3b 72 Data Ascii: /* Colorbox v1.4.31 - 2013-09-25 jQuery lightbox and modal window plugin (c) 2013 Jack Moore - http://www.jacklmoore.com/colorbox license: http://www.opensource.org/licenses/mit-license.php*/(function(e,q,u,y,X,R){function D(a,b){var d=typeof a[b];r
2024-10-23 22:50:44 UTC	1514	IN	Data Raw: 6f 6d 69 6e 67 28 6d 2e 73 75 62 73 74 72 69 6e 67 28 76 2b 31 29 2c 6c 29 7d 2c 6f 75 74 67 6f 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 6d 2c 6c 2c 76 29 7b 64 2e 64 6f 77 6e 2e 6f 75 74 67 6f 69 6e 67 28 68 2b 22 5f 22 2b 6d 2c 6c 2c 76 29 7d 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 61 2e 69 6e 69 74 69 61 74 65 26 26 62 28 29 7d 7d 7d 3b 74 2e 73 74 61 63 6b 2e 52 70 63 42 65 68 61 76 69 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 77 29 7b 77 2e 6a 73 6f 6e 72 70 63 3d 22 32 2e 30 22 3b 6d 2e 64 6f 77 6e 2e 6f 75 74 67 6f 69 6e 67 28 6c 2e 73 74 72 69 6e 67 69 66 79 28 77 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 77 2c 7a 29 7b 76 61 72 20 42 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: oming(m.substring(v+1),l)},outgoing:function(m,l,v){d.down.outgoing(h+"_"+m,l,v)},callback:function(m){a.initiate&&b()}}};t.stack.RpcBehavior=function(a,b){function d(w){w.jsonrpc="2.0";m.down.outgoing(l.stringify(w))}function h(w,z){var B=Array.prototyp
2024-10-23 22:50:44 UTC	16384	IN	Data Raw: 65 72 74 79 28 77 29 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 77 29 26 26 64 65 6c 65 74 65 20 61 5b 77 5d 3b 6d 2e 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 7d 7d 7d 3b 6a 61 2e 65 61 73 79 58 44 4d 3d 74 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 71 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 79 28 66 2c 6b 2c 43 29 7b 66 3d 71 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 29 3b 6b 26 26 28 66 2e 69 64 3d 22 63 62 6f 78 22 2b 6b 29 3b 43 26 26 28 66 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d Data Ascii: erty(w)&&a.hasOwnProperty(w)&&delete a[w];m.down.destroy()}}};ja.easyXDM=t})(window,document,location,window.setTimeout,decodeURIComponent,encodeURIComponent);(function(e,q,u){function y(f,k,C){f=q.createElement(f);k&&(f.id="cbox"+k);C&&(f.style.cssText=
2024-10-23 22:50:44 UTC	6222	IN	Data Raw: 6e 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 67 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 3b 65 2e 72 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 45 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 69 66 72 61 6d 65 3a 66 69 72 73 74 22 29 2e 68 65 69 67 68 74 28 45 29 2e 77 69 64 74 68 28 67 29 3b 76 61 72 20 72 3d 7b 69 6e 6e 65 72 57 69 64 74 68 3a 67 2c 69 6e 6e 65 72 48 65 69 67 68 74 3a 4d 61 74 68 2e 6d 69 6e 28 45 2c 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2d 34 30 29 7d 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 28 29 2e 68 65 69 67 68 74 28 72 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 2e 77 69 64 74 68 28 72 2e 69 6e Data Ascii: n.orientation.addEventListener("change",g)}catch(E){}};e.resize=function(g,E){this.container().children("iframe:first").height(E).width(g);var r={innerWidth:g,innerHeight:Math.min(E,$(window).height()-40)};this.container().height(r.innerHeight).width(r.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	49787	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	632	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-flexslider-814ed83f9289c3e5ab877d6898687235.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	509	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:16 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:15 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:16 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout13-pr x-varnish: 651788377 25395696 age: 100168 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 379784 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:44 UTC	984	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 73 6c 69 64 65 72 3d 24 28 65 6c 29 2c 76 61 72 73 3d 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 24 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 6f 70 74 69 6f 6e 73 29 2c 6e 61 6d 65 73 70 61 63 65 3d 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 74 6f 75 63 68 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 2c 65 76 65 6e 74 54 79 70 65 3d 28 74 6f 75 63 68 29 3f 22 74 6f 75 63 68 65 6e 64 22 Data Ascii: ;(function($){$.flexslider=function(el,options){var slider=$(el),vars=$.extend({},$.flexslider.defaults,options),namespace=vars.namespace,touch=("ontouchstart"in window)\|\|window.DocumentTouch&&document instanceof DocumentTouch,eventType=(touch)?"touchend"
2024-10-23 22:50:44 UTC	10136	IN	Data Raw: 7b 7d 3b 73 6c 69 64 65 72 2e 6d 61 6e 75 61 6c 50 61 75 73 65 3d 66 61 6c 73 65 3b 73 6c 69 64 65 72 2e 74 72 61 6e 73 69 74 69 6f 6e 73 3d 21 76 61 72 73 2e 76 69 64 65 6f 26 26 21 66 61 64 65 26 26 76 61 72 73 2e 75 73 65 43 53 53 26 26 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 62 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 2c 70 72 6f 70 73 3d 5b 27 70 65 72 73 70 65 63 74 69 76 65 50 72 6f 70 65 72 74 79 27 2c 27 57 65 62 6b 69 74 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 4d 6f 7a 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 4f 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 6d 73 50 65 72 73 70 65 63 74 69 76 65 27 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 70 72 6f 70 73 29 7b 69 66 28 6f 62 6a 2e Data Ascii: {};slider.manualPause=false;slider.transitions=!vars.video&&!fade&&vars.useCSS&&(function(){var obj=document.createElement('div'),props=['perspectiveProperty','WebkitPerspective','MozPerspective','OPerspective','msPerspective'];for(var i in props){if(obj.
2024-10-23 22:50:44 UTC	2896	IN	Data Raw: 65 72 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3b 73 77 69 74 63 68 28 61 63 74 69 6f 6e 29 7b 63 61 73 65 22 61 6e 69 6d 61 74 65 22 3a 24 6f 62 6a 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 74 61 72 67 65 74 2c 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 66 61 6c 73 65 2c 74 72 75 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 6c 61 79 22 3a 69 66 28 21 24 6f 62 6a 2e 70 6c 61 79 69 6e 67 26 26 21 24 6f 62 6a 2e 61 73 4e 61 76 29 7b 24 6f 62 6a 2e 70 6c 61 79 28 29 3b 7d 62 72 65 61 6b 3b 63 61 73 65 22 70 61 75 73 65 22 3a 24 6f 62 6a 2e 70 61 75 73 65 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 0a 73 6c 69 64 65 72 2e 66 6c 65 78 41 6e 69 6d 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 2c 70 61 75 73 65 2c 6f 76 65 72 72 69 64 65 2c 77 69 74 68 Data Ascii: er.animatingTo;switch(action){case"animate":$obj.flexAnimate(target,vars.pauseOnAction,false,true);break;case"play":if(!$obj.playing&&!$obj.asNav){$obj.play();}break;case"pause":$obj.pause();break;}}}slider.flexAnimate=function(target,pause,override,with
2024-10-23 22:50:44 UTC	2896	IN	Data Raw: 2e 61 6e 69 6d 61 74 69 6f 6e 53 70 65 65 64 2c 76 61 72 73 2e 65 61 73 69 6e 67 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 74 61 72 67 65 74 29 2e 66 61 64 65 49 6e 28 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 53 70 65 65 64 2c 76 61 72 73 2e 65 61 73 69 6e 67 2c 73 6c 69 64 65 72 2e 77 72 61 70 75 70 29 3b 7d 65 6c 73 65 7b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 73 6c 69 64 65 72 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 2e 63 73 73 28 7b 22 6f 70 61 63 69 74 79 22 3a 30 2c 22 7a 49 6e 64 65 78 22 3a 31 7d 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 74 61 72 67 65 74 29 2e 63 73 73 28 7b 22 6f 70 61 63 69 74 79 22 3a 31 2c 22 7a 49 6e 64 65 78 22 3a 32 7d 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 75 6e 62 69 Data Ascii: .animationSpeed,vars.easing);slider.slides.eq(target).fadeIn(vars.animationSpeed,vars.easing,slider.wrapup);}else{slider.slides.eq(slider.currentSlide).css({"opacity":0,"zIndex":1});slider.slides.eq(target).css({"opacity":1,"zIndex":2});slider.slides.unbi
2024-10-23 22:50:44 UTC	1448	IN	Data Raw: 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 70 6f 73 3b 7d 7d 7d 28 29 29 3b 72 65 74 75 72 6e 28 70 6f 73 43 61 6c 63 2a 2d 31 29 2b 22 70 78 22 3b 7d 28 29 29 3b 69 66 28 73 6c 69 64 65 72 2e 74 72 61 6e 73 69 74 69 6f 6e 73 29 7b 74 61 72 67 65 74 3d 28 76 65 72 74 69 63 61 6c 29 3f 22 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 22 2b 74 61 72 67 65 74 2b 22 2c 30 29 22 3a 22 74 72 61 6e 73 6c 61 74 65 33 64 28 22 2b 74 61 72 67 65 74 2b 22 2c 30 2c 30 29 22 3b 64 75 72 3d 28 64 75 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 3f 28 64 75 72 2f 31 30 30 30 29 2b 22 73 22 3a 22 30 73 22 3b 73 6c 69 64 65 72 2e 63 6f 6e 74 61 69 6e 65 72 2e 63 73 73 28 22 2d 22 2b 73 6c 69 64 65 72 2e 70 66 78 2b 22 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c Data Ascii: fault:return pos;}}}());return(posCalc*-1)+"px";}());if(slider.transitions){target=(vertical)?"translate3d(0,"+target+",0)":"translate3d("+target+",0,0)";dur=(dur!==undefined)?(dur/1000)+"s":"0s";slider.container.css("-"+slider.pfx+"-transition-duration",
2024-10-23 22:50:44 UTC	16384	IN	Data Raw: 69 64 65 72 4f 66 66 73 65 74 2a 73 6c 69 64 65 72 2e 68 2c 22 69 6e 69 74 22 29 3b 7d 2c 28 74 79 70 65 3d 3d 3d 22 69 6e 69 74 22 29 3f 31 30 30 3a 30 29 3b 7d 65 6c 73 65 7b 73 6c 69 64 65 72 2e 63 6f 6e 74 61 69 6e 65 72 2e 77 69 64 74 68 28 28 73 6c 69 64 65 72 2e 63 6f 75 6e 74 2b 73 6c 69 64 65 72 2e 63 6c 6f 6e 65 43 6f 75 6e 74 29 2a 32 30 30 2b 22 25 22 29 3b 73 6c 69 64 65 72 2e 73 65 74 50 72 6f 70 73 28 73 6c 69 64 65 72 4f 66 66 73 65 74 2a 73 6c 69 64 65 72 2e 63 6f 6d 70 75 74 65 64 57 2c 22 69 6e 69 74 22 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 69 64 65 72 2e 64 6f 4d 61 74 68 28 29 3b 73 6c 69 64 65 72 2e 6e 65 77 53 6c 69 64 65 73 2e 63 73 73 28 7b 22 77 69 64 74 68 22 3a 73 6c 69 64 65 72 2e 63 6f Data Ascii: iderOffsetslider.h,"init");},(type==="init")?100:0);}else{slider.container.width((slider.count+slider.cloneCount)200+"%");slider.setProps(sliderOffset*slider.computedW,"init");setTimeout(function(){slider.doMath();slider.newSlides.css({"width":slider.co
2024-10-23 22:50:44 UTC	8232	IN	Data Raw: 65 67 61 74 65 54 61 72 67 65 74 3d 63 6c 6f 73 65 73 74 28 65 2e 74 61 72 67 65 74 2c 73 65 6c 65 63 74 6f 72 29 3b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 54 61 72 67 65 74 29 7b 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 65 6c 65 6d 65 6e 74 2c 65 29 3b 7d 7d 7d 0a 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 64 65 6c 65 67 61 74 65 3b 7d 29 2c 38 37 39 3a 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 7b 65 78 70 6f 72 74 73 2e 6e 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 76 61 6c 75 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 76 61 6c 75 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 76 61 6c 75 65 2e 6e Data Ascii: egateTarget=closest(e.target,selector);if(e.delegateTarget){callback.call(element,e);}}}module.exports=delegate;}),879:(function(__unused_webpack_module,exports){exports.node=function(value){return value!==undefined&&value instanceof HTMLElement&&value.n
2024-10-23 22:50:44 UTC	5792	IN	Data Raw: 65 79 3a 22 5f 6d 61 6e 61 67 65 4e 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 5f 69 6e 65 72 74 4d 61 6e 61 67 65 72 2e 72 65 67 69 73 74 65 72 28 65 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 61 64 64 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 6d 61 6e 61 67 65 4e 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 65 3d 74 68 69 73 2e 5f 69 6e 65 72 74 4d 61 6e 61 67 65 72 2e 64 65 72 65 67 69 73 74 65 72 28 65 2c 74 68 69 73 29 29 26 26 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 64 65 6c 65 74 65 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 6d 61 6e 61 67 65 53 75 62 74 72 65 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ey:"_manageNode",value:function(e){e=this._inertManager.register(e,this),this._managedNodes.add(e)}},{key:"_unmanageNode",value:function(e){(e=this._inertManager.deregister(e,this))&&this._managedNodes.delete(e)}},{key:"_unmanageSubtree",value:function(e)
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 69 3a 28 6e 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 6e 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 69 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 6e 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 67 29 7d 28 6e 2c 75 29 2c 6e 29 29 7b 69 66 28 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 6e 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 75 2e 6d 65 74 68 6f 64 29 75 2e 73 65 6e 74 3d 75 2e 5f 73 65 6e 74 3d 75 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 75 2e 6d 65 74 68 6f 64 29 7b 69 66 28 68 3d 3d 3d 66 29 74 68 72 6f 77 20 68 3d 79 2c 75 2e 61 72 67 3b 75 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 28 75 2e 61 72 67 29 7d 65 Data Ascii: i:(n.method="throw",n.arg=new TypeError("iterator result is not an object"),n.delegate=null,g)}(n,u),n)){if(n===g)continue;return n}if("next"===u.method)u.sent=u._sent=u.arg;else if("throw"===u.method){if(h===f)throw h=y,u.arg;u.dispatchException(u.arg)}e
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 2c 72 29 7b 69 66 28 70 28 74 2c 61 29 29 74 68 72 6f 77 20 79 28 76 29 3b 72 65 74 75 72 6e 20 72 2e 66 61 63 61 64 65 3d 74 2c 73 28 74 2c 61 2c 72 29 2c 72 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 28 74 2c 61 29 3f 74 5b 61 5d 3a 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 28 74 2c 61 29 7d 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 73 65 74 3a 6e 2c 67 65 74 3a 6f 2c 68 61 73 3a 64 2c 65 6e 66 6f 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 28 74 29 3f 6f 28 74 29 3a 6e 28 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3b 69 66 28 21 66 28 72 29 7c 7c 28 65 Data Ascii: ,r){if(p(t,a))throw y(v);return r.facade=t,s(t,a,r),r},o=function(t){return p(t,a)?t[a]:{}},function(t){return p(t,a)}));t.exports={set:n,get:o,has:d,enforce:function(t){return d(t)?o(t):n(t,{})},getterFor:function(t){return function(r){var e;if(!f(r)\|\|(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.10	49786	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	626	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c93875c6b21e.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	509	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:16 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:16 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:16 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout13-pr x-varnish: 655426173 27329331 age: 100167 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 166276 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:44 UTC	2432	IN	Data Raw: 76 61 72 20 53 72 65 48 74 74 70 3b 53 72 65 48 74 74 70 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 72 65 48 74 74 70 28 6e 61 6d 65 29 7b 74 68 69 73 2e 71 75 65 75 65 3d 6e 65 77 20 24 2e 61 6a 51 75 65 75 65 28 29 3b 74 68 69 73 2e 6e 61 6d 65 3d 6e 61 6d 65 3b 7d 0a 53 72 65 48 74 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 5f 74 68 73 3b 5f 74 68 73 3d 74 68 69 73 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 3d 3d 6e 75 6c 6c 29 7b 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 3d 74 72 75 65 3b 7d 0a 6f 70 74 69 6f 6e 73 2e 74 69 6d 65 6f 75 74 3d 6f 70 74 69 6f 6e 73 2e 74 69 6d 65 6f 75 74 7c 7c 33 30 30 30 30 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 71 Data Ascii: var SreHttp;SreHttp=(function(){function SreHttp(name){this.queue=new $.ajQueue();this.name=name;}SreHttp.prototype.post=function(options){var _ths;_ths=this;if(options.queue==null){options.queue=true;}options.timeout=options.timeout\|\|30000;if(options.q
2024-10-23 22:50:44 UTC	11584	IN	Data Raw: 6a 71 29 3b 6a 71 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 27 2b 2a 27 2c 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 71 75 65 75 65 64 4f 70 74 69 6f 6e 73 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 29 7b 71 75 65 75 65 64 4f 70 74 69 6f 6e 73 3d 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 70 74 69 6f 6e 73 29 3b 71 75 65 75 65 64 4f 70 74 69 6f 6e 73 2e 71 75 65 75 65 3d 66 61 6c 73 65 3b 71 75 65 75 65 64 4f 70 74 69 6f 6e 73 2e 70 72 6f 63 65 73 73 44 61 74 61 3d 66 61 6c 73 65 3b 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 68 65 61 64 65 72 73 2c 63 6f 6d 70 6c 65 74 65 29 7b 72 65 74 75 72 6e 20 70 75 73 68 28 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 2c 71 75 65 75 65 64 4f 70 74 69 6f 6e 73 29 2e 64 6f Data Ascii: jq);jq.ajaxTransport('+*',function(options){var queuedOptions;if(options.queue){queuedOptions=$.extend({},options);queuedOptions.queue=false;queuedOptions.processData=false;return{send:function(headers,complete){return push(options.queue,queuedOptions).do
2024-10-23 22:50:44 UTC	1448	IN	Data Raw: 69 74 65 73 22 29 2e 70 61 72 65 6e 74 28 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 3d 3d 3d 22 61 63 74 69 76 65 22 29 7b 53 52 45 2e 6d 61 70 2e 72 65 6d 6f 76 65 45 6e 74 69 74 69 65 73 28 29 3b 53 52 45 2e 66 61 76 6f 72 69 74 65 73 2e 67 65 74 46 61 76 6f 72 69 74 65 73 28 29 3b 72 65 74 75 72 6e 20 24 5f 28 22 2e 74 69 70 73 79 22 29 2e 72 65 6d 6f 76 65 28 29 3b 7d 7d 7d 29 3b 7d 3b 53 72 65 46 61 76 6f 72 69 74 65 73 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 46 61 76 6f 72 69 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 74 68 73 3b 5f 74 68 73 3d 74 68 69 73 3b 53 52 45 2e 68 65 6c 70 65 72 2e 70 72 65 73 65 6e 74 4c 6f 61 64 65 72 28 29 3b 72 65 74 75 72 6e 20 53 52 45 2e 61 75 74 68 2e 63 68 65 63 6b 43 75 72 72 65 6e 74 55 73 Data Ascii: ites").parent().attr("class")==="active"){SRE.map.removeEntities();SRE.favorites.getFavorites();return $_(".tipsy").remove();}}});};SreFavorites.prototype.getFavorites=function(){var _ths;_ths=this;SRE.helper.presentLoader();return SRE.auth.checkCurrentUs
2024-10-23 22:50:44 UTC	2896	IN	Data Raw: 72 6e 20 77 69 6e 64 6f 77 2e 53 45 41 52 43 48 5f 4c 49 53 54 49 4e 47 49 44 5f 41 52 52 41 59 2e 70 75 73 68 28 6f 2e 6c 69 73 74 69 6e 67 2e 6c 69 73 74 69 6e 67 69 64 29 3b 7d 7d 29 3b 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 65 76 65 6e 74 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 53 52 45 2e 6d 61 70 2e 6d 61 70 2c 22 69 64 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 52 45 2e 6d 61 70 2e 70 69 6e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 2e 70 72 69 6e 74 28 29 3b 7d 29 3b 69 66 28 53 52 45 2e 73 65 61 72 63 68 2e 63 6f 6e 74 65 78 74 3d 3d 3d 22 74 69 6c 65 73 22 29 7b 24 5f 28 22 23 77 73 6c 6c 63 2d 74 69 6c 65 73 22 29 2e 65 6d 70 74 79 28 29 3b 72 65 74 75 72 6e 20 53 52 45 2e 6c 69 73 74 69 6e 67 2e 61 70 70 65 6e 64 54 69 6c 65 56 69 Data Ascii: rn window.SEARCH_LISTINGID_ARRAY.push(o.listing.listingid);}});google.maps.event.addListener(SRE.map.map,"idle",function(){return SRE.map.pin_collection.print();});if(SRE.search.context==="tiles"){$_("#wsllc-tiles").empty();return SRE.listing.appendTileVi
2024-10-23 22:50:44 UTC	1448	IN	Data Raw: 5f 6c 69 73 74 69 6e 67 5f 61 72 72 61 79 2c 75 73 65 72 5f 63 6f 6d 6d 65 6e 74 5f 61 72 72 61 79 3a 75 73 65 72 5f 63 6f 6d 6d 65 6e 74 5f 61 72 72 61 79 2c 61 67 65 6e 74 5f 63 6f 6d 6d 65 6e 74 5f 61 72 72 61 79 3a 61 67 65 6e 74 5f 63 6f 6d 6d 65 6e 74 5f 61 72 72 61 79 7d 7d 3b 53 52 45 2e 66 61 76 6f 72 69 74 65 73 2e 6e 75 6d 62 65 72 5f 72 65 74 75 72 6e 65 64 3d 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 2e 6e 75 6d 62 65 72 5f 72 65 74 75 72 6e 65 64 3b 53 52 45 2e 73 65 61 72 63 68 2e 72 65 73 70 6f 6e 73 65 3d 6c 69 73 74 5f 76 69 65 77 5f 6f 62 6a 3b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 52 45 2e 6d 61 70 2e 73 65 74 4d 61 70 50 69 6e 73 28 6c 69 73 74 5f 76 69 65 77 5f 6f 62 6a 29 3b 53 52 45 Data Ascii: _listing_array,user_comment_array:user_comment_array,agent_comment_array:agent_comment_array}};SRE.favorites.number_returned=response.data.number_returned;SRE.search.response=list_view_obj;return setTimeout(function(){SRE.map.setMapPins(list_view_obj);SRE
2024-10-23 22:50:44 UTC	16384	IN	Data Raw: 3b 7d 0a 53 52 45 2e 66 61 76 6f 72 69 74 65 73 2e 61 64 64 43 6f 6d 6d 65 6e 74 28 74 68 73 49 64 2c 74 68 73 43 6f 6d 6d 65 6e 74 29 3b 72 65 74 75 72 6e 20 53 52 45 2e 68 65 6c 70 65 72 2e 67 6f 6f 67 6c 65 54 72 61 63 6b 45 76 65 6e 74 28 27 53 65 61 72 63 68 20 49 6e 74 65 72 61 63 74 69 6f 6e 27 2c 27 46 61 76 6f 72 69 74 65 20 7c 20 41 64 64 20 43 6f 6d 6d 65 6e 74 20 7c 20 46 72 6f 6d 20 46 61 76 6f 72 69 74 65 73 20 4c 69 73 74 27 2c 74 68 73 49 64 2b 27 27 29 3b 7d 29 3b 7d 29 3b 7d 3b 53 72 65 46 61 76 6f 72 69 74 65 73 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 66 61 76 6f 72 69 74 65 5f 69 64 2c 63 6f 6d 6d 65 6e 74 29 7b 63 6f 6d 6d 65 6e 74 3d 63 6f 6d 6d 65 6e 74 2e 72 65 70 6c 61 63 65 28 Data Ascii: ;}SRE.favorites.addComment(thsId,thsComment);return SRE.helper.googleTrackEvent('Search Interaction','Favorite \| Add Comment \| From Favorites List',thsId+'');});});};SreFavorites.prototype.addComment=function(favorite_id,comment){comment=comment.replace(
2024-10-23 22:50:44 UTC	6784	IN	Data Raw: 69 66 28 65 2e 77 68 69 63 68 3d 3d 31 33 29 7b 67 6c 6f 62 61 6c 45 6d 61 69 6c 57 69 64 67 65 74 52 65 66 2e 76 61 6c 69 64 61 74 65 28 29 3b 7d 7d 29 3b 6a 51 75 65 72 79 28 27 23 77 6d 73 5f 65 6d 61 69 6c 5f 6c 69 73 74 69 6e 67 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 6c 6f 62 61 6c 45 6d 61 69 6c 57 69 64 67 65 74 52 65 66 2e 76 61 6c 69 64 61 74 65 28 29 3b 7d 29 3b 7d 3b 24 2e 66 6e 5b 70 6c 75 67 69 6e 4e 61 6d 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 24 2e 64 61 74 61 28 74 68 69 73 2c 27 70 6c 75 67 69 6e 5f 27 2b 70 6c 75 67 69 6e 4e 61 6d 65 29 Data Ascii: if(e.which==13){globalEmailWidgetRef.validate();}});jQuery('#wms_email_listing input[type=button]').click(function(e){globalEmailWidgetRef.validate();});};$.fn[pluginName]=function(options){return this.each(function(){if(!$.data(this,'plugin_'+pluginName)
2024-10-23 22:50:44 UTC	2896	IN	Data Raw: 3b 71 73 2b 3d 27 26 6c 65 61 64 5f 74 72 61 78 5f 73 6f 75 72 63 65 5f 63 61 74 65 67 6f 72 79 3d 27 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 4c 69 73 74 69 6e 67 20 64 65 74 61 69 6c 22 29 3b 76 61 72 20 69 73 5f 63 32 31 5f 73 63 68 65 65 74 7a 5f 62 72 6f 6b 65 72 61 67 65 5f 73 69 74 65 5f 6c 69 73 74 69 6e 67 3d 28 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 69 74 65 74 79 70 65 22 29 3d 3d 22 42 72 6f 6b 65 72 61 67 65 20 57 65 62 73 69 74 65 22 26 26 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 6d 70 61 6e 79 74 6f 6b 65 6e 22 29 3d 3d 22 33 32 33 30 37 33 37 22 26 26 57 78 2e 64 61 74 61 2e 6c 69 73 74 69 6e 67 5f 64 65 74 61 69 6c 2e 63 6f 6d 70 61 6e 79 5f 75 75 69 64 3d 3d 22 Data Ascii: ;qs+='&lead_trax_source_category='+encodeURIComponent("Listing detail");var is_c21_scheetz_usererage_site_listing=($("body").attr("data-sitetype")=="usererage Website"&&$("body").attr("data-companytoken")=="3230737"&&Wx.data.listing_detail.company_uuid=="
2024-10-23 22:50:44 UTC	1448	IN	Data Raw: 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 2c 6c 65 61 64 5f 6d 65 73 73 61 67 65 3a 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 6d 65 73 73 61 67 65 2c 63 6f 6d 70 61 6e 79 5f 75 75 69 64 3a 6a 51 75 65 72 79 28 27 62 6f 64 79 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 63 6f 6d 70 61 6e 79 74 6f 6b 65 6e 27 29 2c 73 6f 75 72 63 65 5f 74 79 70 65 3a 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 69 74 65 74 79 70 65 22 29 2c 73 6f 75 72 63 65 5f 63 61 74 65 67 6f 72 79 5f 6b 65 79 3a 22 67 65 6e 65 72 69 63 5f 63 6f 6e 74 61 63 74 5f 66 6f 72 6d 22 7d 3b 69 66 28 6a 51 75 65 72 79 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 77 6d 73 5f 65 63 5f 6f 66 66 69 63 65 5f 75 75 69 64 5d 22 2c 63 6f 6e 74 65 78 74 29 2e 6c 65 6e 67 74 Data Ascii: .agent_email,lead_message:internal_route_params.message,company_uuid:jQuery('body').attr('data-companytoken'),source_type:$("body").attr("data-sitetype"),source_category_key:"generic_contact_form"};if(jQuery("input[name=wms_ec_office_uuid]",context).lengt
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 3d 41 4f 53 2e 73 69 74 65 5f 70 72 6f 66 69 6c 65 5f 65 6d 61 69 6c 3b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 6e 61 6d 65 3d 41 4f 53 2e 73 69 74 65 5f 70 72 6f 66 69 6c 65 5f 65 6d 61 69 6c 3b 7d 0a 69 66 28 6d 65 73 73 61 67 65 50 61 72 61 6d 73 5b 27 61 6f 73 5f 65 6d 61 69 6c 5f 6c 65 61 64 5f 72 6f 75 74 69 6e 67 5f 72 65 6d 6f 76 65 5f 61 67 65 6e 74 5f 65 6d 61 69 6c 27 5d 29 7b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 3d 27 27 3b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 6e 61 6d 65 3d 27 27 3b 7d 0a 69 66 28 6d 65 73 73 61 67 65 50 61 Data Ascii: oute_params.agent_email=AOS.site_profile_email;internal_route_params.agent_name=AOS.site_profile_email;}if(messageParams['aos_email_lead_routing_remove_agent_email']){internal_route_params.agent_email='';internal_route_params.agent_name='';}if(messagePa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.10	49784	142.250.186.132	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	687	OUT	GET /recaptcha/api.js?render=6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV&ver=A.3.49.20241022.0.6 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 23 Oct 2024 22:50:44 GMT Date: Wed, 23 Oct 2024 22:50:44 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:44 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-23 22:50:44 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-23 22:50:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.10	49789	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:44 UTC	800	OUT	GET /embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:44 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 22:50:44 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Content-Security-Policy: require-trusted-types-for 'script' P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=FB_sLuvYowY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=NdFDmQmxdgc; Domain=.youtube.com; Expires=Mon, 21-Apr-2025 22:50:44 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D; Domain=.youtube.com; Expires=Mon, 21-Apr-2025 22:50:44 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:44 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 6a 46 31 6b 6c 45 47 31 75 75 4b 64 35 6f 6f 7a 4f 47 62 6c 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="JjF1klEG1uuKd5oozOGblw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-23 22:50:44 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-23 22:50:44 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 4c 4e 39 79 64 4c 6a 52 33 38 50 51 46 64 56 76 51 4c 53 36 76 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="LN9ydLjR38PQFdVvQLS6vw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-23 22:50:44 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 63 72 65 61 74 6f 72 5f 67 6f 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d Data Ascii: true,"enable_client_creator_goal_ticker_bar_revamp":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_m
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 63 6c 69 63 6b 5f Data Ascii: sed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log_click_
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 Data Ascii: _fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true,"web_e
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 79 6f 75 74 75 62 65 2f 69 Data Ascii: s":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_url":"https://www.gstatic.com/youtube/i
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 64 62 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 45 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 22 43 68 78 4f 65 6c 46 35 54 31 52 46 64 30 35 36 54 54 42 4e 56 46 56 33 54 56 52 6a 65 45 31 45 5a 7a 4e 4f 55 54 30 39 45 4d 54 37 35 62 67 47 47 4d 54 37 35 62 67 47 22 7d 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 6b 65 64 53 Data Ascii: "text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7","deviceExperimentId":"ChxOelF5T1RFd056TTBNVFV3TVRjeE1EZzNOUT09EMT75bgGGMT75bgG"},"user":{"lockedS
2024-10-23 22:50:45 UTC	2202	IN	Data Raw: 6e 63 5f 6c 6f 67 67 69 6e 67 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 31 31 79 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 Data Ascii: nc_logging\u003dtrue\u0026a11y_h5_associate_survey_question\u003dtrue\u0026ab_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.10	49792	104.18.11.207	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	660	OUT	GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kristalittle.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	929	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "af7ae505a9eed503f8b8e6982036873e" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/17/2024 08:42:05 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 29dcdb7ca9f21fcaaad844849e901db1 CDN-Cache: HIT CF-Cache-Status: HIT Age: 7232 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d7549affe322c99-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 22:50:45 UTC	440	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: b4 31 12 03 fb f4 ac 3c 0b ed 3b ed f3 d2 60 10 e6 b6 27 f1 48 0e 3f f1 73 ce a9 3a 91 0f 4e 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e a6 ed 1e 21 7f 2d 18 06 4a 19 ca b6 d3 2e e0 d8 fa 91 ee 58 af 3d 0c 2c 12 04 0e 90 9b 1e 22 60 3a 18 a2 ff 1b 0f 09 09 20 7b 8d ef Data Ascii: 1<;`'H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'N!-J.X=,"`: {
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 68 04 37 49 8c f6 a0 3c 53 43 4f 02 ad 19 b8 96 c8 90 48 a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 84 33 1b 21 24 ce e7 e7 b4 e7 e2 de 49 7c 50 98 20 7e 13 26 13 e4 03 64 c5 2e c8 03 1b d4 b0 e9 02 2d 61 07 f3 fa 61 19 09 2b 2b c2 13 92 Data Ascii: h7I<SCOHEw!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3!$I\|P ~&d.-aa++
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 60 2f 22 48 0b 0a 6f 85 26 92 44 97 49 30 ff 45 32 58 61 89 95 2d 1f a9 7b 0e 35 c0 81 99 3c 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 da 6b a9 b4 92 24 e7 f3 8f 0c 42 f0 72 7e f1 86 01 a7 d3 f0 39 13 de 36 8d 30 d1 26 fe 99 5f 76 4d 00 59 c2 25 84 93 d2 9d 7b e6 45 7f 89 Data Ascii: `/"Ho&DI0E2Xa-{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vxk$Br~960&_vMY%{E
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 39 90 87 64 a6 6b 59 fd 0d d9 6a 90 8e c2 52 36 d1 d4 ed f7 03 51 12 21 98 ca 00 ea ee f7 20 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d 11 99 27 6c 53 b2 20 2f f0 52 3e 3c a5 2b e7 4f 9f 95 db d8 1f 65 42 23 95 42 63 d2 1a d9 c0 02 e8 6a 4c 5c 11 12 a3 c4 2d be 5a 68 95 5b Data Ascii: 9dkYjR6Q! V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]'lS /R><+OeB#BcjL\-Zh[
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 7c f6 d4 99 9a 64 4f 86 d9 a5 69 5a ae e3 19 c5 24 ae ee 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 c1 f7 e1 e5 5b e9 16 38 47 1a 86 fe d9 64 74 ac a2 ac a3 b1 7a ec b0 83 d9 a6 06 09 38 b4 b4 42 bd ae 4b 50 22 40 32 65 8c 65 03 e6 Data Ascii: \|dOiZ$+#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp[8Gdtz8BKP"@2ee
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 2d d0 62 44 a0 d4 fc 22 8d 0f ec 5b 3a b0 77 c9 ba 5e 6a f9 89 d3 81 bb d0 51 65 6a 60 8c 8b 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 87 ed 24 58 4c 85 9b ba c3 0a 4a 89 61 61 9a 11 13 dd 86 2c c6 f3 ec 84 90 cc 1a 22 33 2d cf 47 e4 21 1c cb a5 38 b3 b7 f2 38 0a 7c e0 54 Data Ascii: -bD"[:w^jQej`Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1$XLJaa,"3-G!88\|T
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 4a b5 41 ca cd 3b a4 f2 51 3b 1c 95 5d 85 89 fd 49 b4 4d 38 09 d9 73 af 02 aa d8 14 4d 66 f4 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 2b 93 82 cd f6 d9 19 ff 61 07 b6 9c 30 9b 01 1b 86 a4 ff 07 3b e6 1c 20 9d 45 45 61 47 98 64 f1 ce 98 00 06 d7 bf c0 5b ef aa 4d 00 bc ab Data Ascii: JA;Q;]IM8sMf?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2+a0; EEaGd[M
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 18 4d 72 89 f5 c0 9a 7c 5e ba 04 91 09 61 99 bb e2 b7 10 03 fe a7 3a 88 a0 cd 22 e9 d6 8a 9d db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a b8 c0 c1 19 16 80 29 02 6f 90 d0 10 aa 74 6b fd 6c 03 9a e6 c8 2c ae 14 fb 6c 11 e8 a1 eb 0f f3 55 1f ec 29 dd b9 65 98 35 81 3c 41 ba 08 Data Ascii: Mr\|^a:"al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|)otkl,lU)e5<A
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 1d 67 5a be 08 32 cf 76 1a 6c 66 2c df 10 d0 a3 a2 ce 7f 59 bf f3 87 d1 ae ec dd 62 d4 a9 ea 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 e8 79 e2 91 33 82 bb 70 51 09 0e 25 e4 d0 74 5e af 91 d8 20 7c 83 c2 82 5d 9d 59 42 38 6a 43 d7 ac 6e c4 23 07 26 cb c9 87 0b ee fc bd f0 Data Ascii: gZ2vlf,YbXoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAhy3pQ%t^ \|]YB8jCn#&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.10	49791	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	657	OUT	GET /wp-content/plugins/mx_pages/neighborhood-news/images/NN_couple_crop-1200x187.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	460	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:04 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:16 GMT content-length: 22092 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:04 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout12-pr x-varnish: 249364867 218301300 age: 7301 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:45 UTC	1033	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 bb 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 44 10 00 02 01 03 02 03 05 04 08 05 02 05 03 05 01 00 01 02 00 03 04 11 12 21 05 31 41 06 13 22 51 71 32 33 61 81 07 14 23 91 a1 b1 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("D!1A"Qq23a#
2024-10-23 22:50:45 UTC	13032	IN	Data Raw: da 61 d5 7c 64 86 c6 4e 7d 39 0f 29 a7 c3 38 a5 1a 75 14 d3 50 c1 97 49 04 f5 13 4c 52 a5 72 43 77 28 6b 30 d9 9b 6f ca 71 b9 b8 f6 76 c6 29 f4 cc b6 e1 76 ee e6 b3 05 14 4b 67 2d e1 56 f9 73 c7 e7 02 6e 0d 44 d4 a9 4e c7 1d e8 04 d4 60 a3 0a 0f 40 26 e5 ea 15 b8 14 fe ae 5c 26 e1 35 63 00 f5 c0 97 5f d2 6b 7a 14 cd 05 08 40 07 08 0e ff 00 8e df 74 cf 76 69 a2 67 25 4e c2 a5 c5 72 8f 56 9d 21 8d 21 aa 36 74 e3 a9 96 5a f0 ca 6d 58 2a de a0 09 90 6a 54 5d 58 1f ed 1c 86 67 4b 4c da d4 45 22 d6 a9 07 da 64 18 c7 a9 ce f2 ff 00 aa d3 aa 3b a3 4a a5 4a 29 c8 72 f9 60 0c 18 de 46 0b 12 67 37 4a d6 dd 18 26 9a 8e 14 e4 d4 75 24 7a c3 ab 22 53 c3 57 76 ce 32 01 00 fa 42 ee ec ea e4 69 b7 15 00 e4 39 63 e5 cb ef 81 52 b7 a5 de 61 eb 77 6c 9c 90 90 9b fc bf 59 3b Data Ascii: a\|dN}9)8uPILRrCw(k0oqv)vKg-VsnDN`@&\&5c_kz@tvig%NrV!!6tZmX*jT]XgKLE"d;JJ)r`Fg7J&u$z"SWv2Bi9cRawlY;
2024-10-23 22:50:45 UTC	2896	IN	Data Raw: 6b fe 4e 0b b1 14 55 b8 9f 16 a8 d8 65 fa da a2 b2 f4 60 a4 fe 0b 8f 9c d0 ed 17 da 3d e9 a0 5b 5a 51 64 5c 6d 87 6c 01 f3 c6 a9 4f d1 dd b7 d5 f8 55 b2 87 c5 4f ac 56 af 5f 56 70 18 8c 0c 9f 43 f8 cb 7b 51 77 46 da da ba d6 7c 1c a5 4c a9 c6 72 46 36 f4 7f c2 5b 4d e4 e0 eb 4e a3 6c f2 be 2e c9 5a e3 86 69 27 14 c3 ae a3 d5 51 98 03 f8 09 93 50 84 15 2a 8d bc 07 03 cc 9d bf 49 7e 9d 15 b1 85 f0 59 eb 3b f2 d5 8c 7c f7 10 4b f2 52 d1 31 8d 4e cb 8f 4d e7 d0 e3 8d 24 8f 1f 24 ad b6 1d 6a 4a 70 fb 65 dc 1d 25 cf e2 44 a6 b9 f7 58 18 63 58 fd ca 21 35 02 ad 5a 48 c3 6a 69 92 07 96 df b1 83 50 25 be a0 ad b9 29 a8 ff 00 d4 73 f9 4a fd c9 7f 45 75 89 fb 40 0e 54 3e 91 f1 23 69 5d cb 10 58 ef 9c 01 8f 53 2c 64 d2 d4 d4 1e 5a 9c fc 49 cc 7b 95 0c ee 54 6d b6 3d Data Ascii: kNUe`=[ZQd\mlOUOV_VpC{QwF\|LrF6[MNl.Zi'QP*I~Y;\|KR1NM$$jJpe%DXcX!5ZHjiP%)sJEu@T>#i]XS,dZI{Tm=
2024-10-23 22:50:45 UTC	2896	IN	Data Raw: 9e 8e 0f 02 53 f7 64 e1 7f b9 e3 79 7f 8a c3 1f b7 17 2f fd bf f6 01 69 c2 59 bc 57 0c 5b e0 36 9b 34 6d d2 92 61 14 01 21 de 10 7c 23 32 6a 49 3b 99 e9 e3 c1 0c 4b da a8 f0 73 79 39 73 bb c8 ec b5 48 5e 82 4d 72 4f c2 57 4d 32 44 bd 10 6e 26 8c c4 70 07 c3 32 58 18 e7 1b 03 38 93 0a 39 49 18 84 7e b1 62 2c 1e 51 0c 5e 72 2d 8c f2 92 c1 c9 91 39 c6 fd 22 01 89 c6 26 47 69 a9 1a 9c 38 b8 e7 4d 83 7c b9 7e b3 63 39 e9 07 bf a7 de 58 d6 4c 73 42 24 be 8a 5d 9c 65 bd 52 31 34 29 dd 60 73 82 9b 46 51 b0 95 3d 27 1e 73 35 91 a3 47 14 cd 64 ba 07 ac b4 55 04 73 98 4b ad 4f 59 7a d5 60 26 8b 29 0f 18 b8 d3 03 45 bd 27 8c 76 cd 49 77 9e bb c4 19 aa 53 22 79 e7 68 f8 6b 56 66 3a 66 ab 22 21 c1 9e 4e ea 45 53 3a be cc fb 4b 05 bb e0 ce b5 0f 86 6c 70 1b 27 a6 e3 20 Data Ascii: Sdy/iYW[64ma!\|#2jI;Ksy9sH^MrOWM2Dn&p2X89I~b,Q^r-9"&Gi8M\|~c9XLsB$]eR14)`sFQ='s5GdUsKOYz`&)E'vIwS"yhkVf:f"!NES:Klp'
2024-10-23 22:50:45 UTC	2235	IN	Data Raw: 2e de 72 77 1c 5d 95 09 cc 97 8c d6 39 2c ed be b9 4c 9c 64 4b a9 d4 47 e4 67 95 37 68 99 6a e3 5f 59 d5 70 0e 2a 6e 34 ef 21 e3 46 8a 47 60 29 83 22 d4 64 ed 9b 52 03 2f c4 cd c1 15 b0 13 50 f8 4a 9a dc 4d 12 b2 0e 00 12 5e 34 3d cc d6 b7 94 bd 03 0d ad 59 17 99 12 91 71 4d 8f 31 27 d2 29 4c 0d a8 91 20 51 84 d3 50 ad ca 39 a2 0c 9f 4d a1 ec 8c af 10 8b 5b 09 a4 d6 e3 ca 54 d6 d0 f7 a0 f6 b0 31 58 89 60 ae 64 da da 40 db 99 4b 2c 90 69 16 4c 57 93 15 84 18 d1 22 47 43 09 6b 3b f9 21 e2 0d ef 01 8e 18 18 12 86 cc 32 85 26 69 a2 cc 99 2f 19 f3 db 9d e4 a9 ae 64 88 19 96 d1 03 22 7e 72 dd 23 ad 72 59 46 dc b4 3e 8d 9f c2 5d 66 a3 6d a6 90 50 17 61 30 77 23 55 15 46 6b 53 14 96 01 5e ae fb 43 f8 81 3b cc 86 dd a3 48 89 13 0c 4c 58 df 78 eb 1c 0d e0 09 04 db Data Ascii: .rw]9,LdKGg7hj_Yp*n4!FG`)"dR/PJM^4=YqM1')L QP9M[T1X`d@K,iLW"GCk;!2&i/d"~r#rYF>]fmPa0w#UFkS^C;HLXx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.10	49790	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	652	OUT	GET /wp-content/plugins/mx_pages/neighborhood-news/images/NN_devices-238x160.png HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	459	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:04 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:18 GMT content-length: 11146 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:04 GMT x-content-type-options: nosniff content-type: image/png v-backend: dugout13-pr x-varnish: 252248601 218301304 age: 7300 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:45 UTC	5378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ee 00 00 00 a0 08 03 00 00 00 3c 62 a0 0c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 37 50 4c 54 45 00 00 00 0f 0f 0f 00 00 00 00 00 00 d5 d5 d6 02 03 03 e0 e1 e2 16 16 16 01 01 01 14 14 14 a3 aa ac 00 00 00 04 04 04 01 01 01 bf c5 c7 c3 c9 cc be c3 c5 31 31 31 c0 c5 c7 c3 c8 cb c2 c7 ca c3 c8 cb 10 10 10 c3 c8 cb 20 20 20 c3 c7 ca 1b 19 19 70 70 71 ea ea ec a7 ac 95 38 38 38 ff ff ff 00 00 00 dd de df d2 cf c7 be c3 c6 e8 e6 e1 ea e9 e4 e8 e4 da 3a 79 b8 e7 e2 d9 de dc d6 e8 e4 dc d1 ce c6 e9 e5 dc d9 d6 cf d4 d2 ca dc da d3 e5 e1 d7 e6 e1 d8 e0 de d9 e4 e2 dc f6 f6 f4 f9 f8 f7 db d9 d2 e7 e2 db fe ff ff f2 f1 ee d7 d4 cc e5 e3 de ed ea e6 e4 e0 Data Ascii: PNGIHDR<bgAMAasRGB7PLTE111 ppq888:y
2024-10-23 22:50:45 UTC	5768	IN	Data Raw: f0 cd 90 0a fc cc 0c d6 f0 48 41 84 a4 08 f6 7c cb 19 f4 52 55 55 3c 1e af 8a 73 0c 4e 46 61 f4 ff 2a 5c 87 d6 73 31 4d 20 c3 7b 60 af c4 c0 f0 f2 f9 7d da 33 1b 75 38 20 a4 28 e0 7a 2d 80 8b 43 4e d6 19 b0 5b b4 4c 4c 15 b4 0a 8c 99 ed b5 ba a3 67 e4 e9 6d a2 c8 32 8c c4 d9 44 89 63 24 db d1 e3 d9 9e 97 ac 5d 52 b7 c2 d8 97 a7 2d 38 3d 41 10 0c c3 0f f6 95 8b f3 b1 1c 82 36 be 20 d0 3a ea d1 23 2c ab 7b 12 89 40 c8 92 8e b6 28 87 8c da d5 db 5a 8e 96 cc c8 b6 76 90 e7 8d 2d e6 97 ab 5d 9e e4 7e 98 e1 93 21 60 59 31 3b 86 47 f6 70 b1 e3 6e 3b a0 89 63 f4 25 c8 75 8e 47 5f d0 06 8f a1 4f c6 39 01 24 86 a4 95 19 e7 20 86 19 aa 13 27 ce 1c 94 43 b3 6a 9e 3e f5 d4 e9 23 66 de 94 b0 31 cb 34 26 ff 02 81 86 03 f3 fc 9d 8d 0c 2e d2 a6 fa 2c 32 b6 58 9c 01 20 50 Data Ascii: HA\|RUU<sNFa*\s1M {`}3u8 (z-CN[LLgm2Dc$]R-8=A6 :#,{@(Zv-]~!`Y1;Gpn;c%uG_O9$ 'Cj>#f14&.,2X P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.10	49795	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	630	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-thickbox-c9f1ac4d10271921b65df940585b53c7.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	509	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:27 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:20 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:27 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout12-pr x-varnish: 648251943 31261368 age: 100157 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 564724 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:45 UTC	14016	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 21 3d 27 73 74 72 69 6e 67 27 29 7b 76 61 72 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 3d 74 68 69 63 6b 62 6f 78 4c 31 30 6e 2e 6c 6f 61 64 69 6e 67 41 6e 69 6d 61 74 69 6f 6e 3b 7d 0a 2f 2a 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 20 65 64 69 74 20 62 65 6c 6f 77 20 74 68 69 73 20 6c 69 6e 65 20 61 74 20 79 6f 75 72 20 6f 77 6e 20 72 69 73 6b 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 62 5f 69 6e 69 74 28 27 61 2e 74 68 69 63 6b 62 6f 78 2c 20 61 72 65 61 2e 74 68 69 63 6b 62 6f 78 2c 20 69 6e 70 75 74 2e 74 68 69 63 6b 62 6f 78 Data Ascii: if(typeof tb_pathToImage!='string'){var tb_pathToImage=thickboxL10n.loadingAnimation;}/!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/jQuery(document).ready(function(){tb_init('a.thickbox, area.thickbox, input.thickbox
2024-10-23 22:50:45 UTC	7240	IN	Data Raw: 22 3a 20 22 2b 73 28 65 2e 6c 61 6d 62 64 61 28 6e 75 6c 6c 21 3d 28 6c 3d 6e 75 6c 6c 21 3d 74 3f 63 28 74 2c 22 61 67 65 6e 74 22 29 3a 74 29 3f 63 28 6c 2c 22 70 68 6f 6e 65 22 29 3a 6c 2c 74 29 29 2b 22 3c 2f 70 3e 5c 6e 22 7d 2c 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 2c 73 3d 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 2c 63 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 61 Data Ascii: ": "+s(e.lambda(null!=(l=null!=t?c(t,"agent"):t)?c(l,"phone"):l,t))+"</p>\n"},11:function(e,t,a,o,i){var l,s=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <p class="form-a
2024-10-23 22:50:45 UTC	15928	IN	Data Raw: 6c 28 73 2c 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 6e 61 6d 65 2e 22 2c 7b 6e 61 6d 65 3a 22 74 22 2c 68 61 73 68 3a 7b 7d 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 32 30 2c 63 6f 6c 75 6d 6e 3a 38 34 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 32 30 2c 63 6f 6c 75 6d 6e 3a 31 31 37 7d 7d 7d 29 29 2b 27 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 27 2b 63 28 72 28 6e 28 30 29 29 2e 63 61 6c 6c 28 73 2c 22 45 6e 74 65 72 20 79 6f 75 72 20 6e 61 6d 65 22 2c 7b 6e 61 6d 65 3a 22 74 22 2c 68 61 73 68 3a 7b 7d 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 32 31 2c 63 6f 6c 75 6d 6e 3a 32 38 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 32 31 2c Data Ascii: l(s,"Please provide your name.",{name:"t",hash:{},data:i,loc:{start:{line:20,column:84},end:{line:20,column:117}}}))+'"\n placeholder="'+c(r(n(0)).call(s,"Enter your name",{name:"t",hash:{},data:i,loc:{start:{line:21,column:28},end:{line:21,
2024-10-23 22:50:45 UTC	2896	IN	Data Raw: 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 63 28 73 28 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 69 64 50 72 65 66 69 78 22 29 3a 74 2c 74 29 29 2b 22 5f 70 68 6f 6e 65 5f 63 6f 6d 70 6c 69 61 6e 63 65 22 2b 28 6e 75 6c 6c 21 3d 28 6c 3d 70 28 61 2c 22 69 66 22 29 2e 63 61 6c 6c 28 75 2c 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 69 73 43 6f 61 67 65 6e 74 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 31 2c 69 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 6e 6f 6f 70 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 31 32 31 2c 63 6f 6c 75 6d 6e 3a 35 31 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 31 32 31 2c 63 6f 6c 75 6d 6e 3a 38 34 7d 7d 7d 29 29 3f 6c 3a 22 22 29 Data Ascii: <label for="'+c(s(null!=t?p(t,"idPrefix"):t,t))+"_phone_compliance"+(null!=(l=p(a,"if").call(u,null!=t?p(t,"isCoagent"):t,{name:"if",hash:{},fn:e.program(1,i,0),inverse:e.noop,data:i,loc:{start:{line:121,column:51},end:{line:121,column:84}}}))?l:"")
2024-10-23 22:50:45 UTC	2896	IN	Data Raw: 61 64 5f 73 6f 75 72 63 65 22 20 76 61 6c 75 65 3d 22 27 2b 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 28 65 2e 6c 61 6d 62 64 61 28 6e 75 6c 6c 21 3d 74 3f 6f 28 74 2c 22 6c 65 61 64 5f 73 6f 75 72 63 65 22 29 3a 74 2c 74 29 29 2b 27 22 3e 5c 6e 27 7d 2c 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 2c 72 29 7b 76 61 72 20 6f 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6c 65 61 64 5f 72 6f 75 74 Data Ascii: ad_source" value="'+e.escapeExpression(e.lambda(null!=t?o(t,"lead_source"):t,t))+'">\n'},43:function(e,t,n,a,r){var o=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <input type="hidden" name="lead_rout
2024-10-23 22:50:45 UTC	5792	IN	Data Raw: 32 2c 63 6f 6c 75 6d 6e 3a 31 38 7d 7d 7d 29 29 3f 6c 3a 22 22 29 2b 22 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 22 7d 2c 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 2c 73 3d 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 2c 63 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 6d 70 6c 61 74 65 20 6e 61 6d 65 3d 22 63 6f 6d 70 61 6e 79 22 3e 27 2b 73 28 65 2e 6c 61 Data Ascii: 2,column:18}}}))?l:"")+" </div>\n </div>\n"},51:function(e,t,a,o,i){var l,s=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <template name="company">'+s(e.la
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 6e 6f 6f 70 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 34 38 2c 63 6f 6c 75 6d 6e 3a 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 35 36 2c 63 6f 6c 75 6d 6e 3a 39 7d 7d 7d 29 29 3f 6c 3a 22 22 29 2b 28 6e 75 6c 6c 21 3d 28 6c 3d 70 28 61 2c 22 69 66 22 29 2e 63 61 6c 6c 28 75 2c 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 73 68 6f 77 49 6e 74 65 72 65 73 74 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 32 34 2c 69 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 6e 6f 6f 70 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 35 37 2c 63 6f 6c 75 6d 6e 3a 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 36 37 2c 63 6f 6c 75 Data Ascii: ,0),inverse:e.noop,data:i,loc:{start:{line:48,column:2},end:{line:56,column:9}}}))?l:"")+(null!=(l=p(a,"if").call(u,null!=t?p(t,"showInterest"):t,{name:"if",hash:{},fn:e.program(24,i,0),inverse:e.noop,data:i,loc:{start:{line:57,column:2},end:{line:67,colu
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 6f 3d 69 28 6e 2c 22 69 66 22 29 2e 63 61 6c 6c 28 6e 75 6c 6c 21 3d 74 3f 74 3a 65 2e 6e 75 6c 6c 43 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 6e 75 6c 6c 21 3d 74 3f 69 28 74 2c 22 75 73 65 4c 69 73 74 69 6e 67 53 6f 6c 64 50 65 6e 64 69 6e 67 43 6f 6e 6e 65 63 74 48 65 61 64 65 72 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 36 2c 72 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 70 72 6f 67 72 61 6d 28 38 2c 72 2c 30 29 2c 64 61 74 61 3a 72 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 35 2c 63 6f 6c 75 6d 6e 3a 34 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 31 31 2c 63 6f 6c 75 6d Data Ascii: ty.call(e,t))return e[t]};return null!=(o=i(n,"if").call(null!=t?t:e.nullContext\|\|{},null!=t?i(t,"useListingSoldPendingConnectHeader"):t,{name:"if",hash:{},fn:e.program(6,r,0),inverse:e.program(8,r,0),data:r,loc:{start:{line:5,column:4},end:{line:11,colum
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 6c 69 6e 65 3a 31 2c 63 6f 6c 75 6d 6e 3a 35 30 7d 7d 7d 29 29 3f 6f 3a 22 22 29 2b 27 22 3e 5c 6e 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 70 79 22 3e 5c 6e 27 2b 28 6e 75 6c 6c 21 3d 28 6f 3d 6c 28 6e 2c 22 69 66 22 29 2e 63 61 6c 6c 28 69 2c 6e 75 6c 6c 21 3d 74 3f 6c 28 74 2c 22 68 65 61 64 65 72 54 65 78 74 4f 76 65 72 72 69 64 65 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 33 2c 72 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 70 72 6f 67 72 61 6d 28 35 2c 72 2c 30 29 2c 64 61 74 61 3a 72 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 33 2c 63 6f 6c 75 6d 6e 3a 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 31 33 2c 63 6f 6c 75 6d 6e 3a 39 7d 7d 7d 29 29 3f 6f 3a 22 22 29 2b 22 20 Data Ascii: line:1,column:50}}}))?o:"")+'">\n <div class="copy">\n'+(null!=(o=l(n,"if").call(i,null!=t?l(t,"headerTextOverride"):t,{name:"if",hash:{},fn:e.program(3,r,0),inverse:e.program(5,r,0),data:r,loc:{start:{line:3,column:2},end:{line:13,column:9}}}))?o:"")+"
2024-10-23 22:50:45 UTC	16384	IN	Data Raw: 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 4d 78 56 61 6c 69 64 61 74 6f 72 28 22 72 65 73 65 74 22 29 2c 69 2e 4d 78 56 61 6c 69 64 61 74 6f 72 28 22 64 65 73 74 72 6f 79 22 29 2c 69 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 22 29 2c 69 5b 30 5d 2e 72 65 73 65 74 28 29 7d 29 29 2c 74 68 69 73 2e 6f 6e 28 22 73 75 62 6d 69 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 28 74 68 69 73 29 2e 4d 78 56 61 6c 69 64 61 74 6f 72 28 22 76 61 6c 69 64 61 74 65 22 29 2c 21 21 74 68 69 73 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 28 29 26 26 28 72 2e 76 61 6c 69 64 61 74 65 52 65 43 61 70 74 63 68 61 28 29 2e 74 68 65 6e 28 Data Ascii: l",(function(e){i.MxValidator("reset"),i.MxValidator("destroy"),i.attr("novalidate",""),i[0].reset()})),this.on("submit",(function(t){var n=this;return t.preventDefault(),e(this).MxValidator("validate"),!!this.checkValidity()&&(r.validateReCaptcha().then(

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.10	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225045Z-16849878b78ngdnlw4w0762cms00000006ug00000000x5v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.10	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225045Z-16849878b788tnsxzb2smucwdc00000006s000000000y3h1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.10	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225045Z-16849878b78gvgmlcfru6nuc5400000006sg00000000mv42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:45 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.10	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 628e7349-b01e-003d-63fd-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225045Z-15b8d89586fwzdd8urmg0p1ebs00000008d0000000008d6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.10	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225045Z-15b8d89586ff5l62quxsfe8ugg0000000d1g00000000hu0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.10	49804	104.18.10.207	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	419	OUT	GET /bootstrap/3.2.0/js/bootstrap.min.js?ver=782b628426a895c0dfd7727f0e7fb402 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"abda843684d022f3bc22bc83927fe05f" Last-Modified: Mon, 25 Jan 2021 22:03:57 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/05/2023 05:58:51 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 7b70b9868f130848f608ae411e52c8bf CDN-Cache: HIT CF-Cache-Status: HIT Age: 18792321 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8d7549b27d316b6a-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 22:50:45 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a Data Ascii: 7bff/! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires j
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 73 74 79 6c 65 5b 63 5d 29 72 65 74 75 72 6e 7b 65 6e 64 3a 62 5b 63 5d 7d 3b 72 65 74 75 72 6e 21 31 7d 61 2e 66 6e 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 21 31 2c 64 3d 74 68 69 73 3b 61 28 74 68 69 73 29 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 30 7d 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 7c 7c 61 28 Data Ascii: sition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 64 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 61 6c 65 72 74 3d 65 2c 74 68 69 73 7d 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 63 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 29 2c 65 3d 64 2e 64 61 74 61 28 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: d,a.fn.alert.noConflict=function(){return a.fn.alert=e,this},a(document).on("click.bs.alert.data-api",c,d.prototype.close)}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 64 3d 61 28 63 2e 74 61 72 67 65 74 29 3b 64 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 64 3d 64 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 29 2c 62 2e 63 61 6c 6c 28 64 2c 22 74 6f 67 67 6c 65 22 29 2c 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 Data Ascii: n("click.bs.button.data-api",'[data-toggle^="button"]',function(c){var d=a(c.target);d.hasClass("btn")\|\|(d=d.closest(".btn")),b.call(d,"toggle"),c.preventDefault()})}(jQuery),+function(a){"use strict";function b(b){return this.each(function(){var d=a(this
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 69 6e 64 65 78 28 61 7c 7c 74 68 69 73 2e 24 61 63 74 69 76 65 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2c 64 3d 74 68 69 73 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 24 61 63 74 69 76 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 69 74 65 6d 2e 61 63 74 69 76 65 22 29 29 3b 72 65 74 75 72 6e 20 62 3e 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 30 3e 62 3f 76 6f 69 64 20 30 3a 74 68 69 73 2e 73 6c 69 64 69 6e 67 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 74 6f 28 62 29 Data Ascii: ),this.$items.index(a\|\|this.$active)},c.prototype.to=function(b){var c=this,d=this.getItemIndex(this.$active=this.$element.find(".item.active"));return b>this.$items.length-1\|\|0>b?void 0:this.sliding?this.$element.one("slid.bs.carousel",function(){c.to(b)
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 64 54 61 72 67 65 74 3a 6a 2c 64 69 72 65 63 74 69 6f 6e 3a 67 7d 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 73 6c 69 64 65 22 29 3f 28 65 2e 61 64 64 43 6c 61 73 73 28 62 29 2c 65 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 64 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 65 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 64 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 62 2c 67 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 64 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 61 63 74 69 76 65 22 2c 67 Data Ascii: dTarget:j,direction:g});return a.support.transition&&this.$element.hasClass("slide")?(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),d.one("bsTransitionEnd",function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 20 62 26 26 65 5b 62 5d 28 29 7d 29 7d 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 63 2e 44 45 46 41 55 4c 54 53 2c 64 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 26 26 28 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 61 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 67 67 6c 65 26 26 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 7d 3b 63 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 32 2e 30 22 2c 63 2e 44 45 46 41 55 4c 54 53 3d 7b 74 6f 67 67 6c 65 3a 21 30 7d 2c 63 2e 70 72 Data Ascii: b&&e[b]()})}var c=function(b,d){this.$element=a(b),this.options=a.extend({},c.DEFAULTS,d),this.transitioning=null,this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};c.VERSION="3.2.0",c.DEFAULTS={toggle:!0},c.pr
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 5b 63 5d 28 29 29 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 31 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 30 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 68 69 64 64 65 6e 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: ement[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse").removeClass("in"),this.transitioning=1;var d=function(){this.transitioning=0,this.$element.trigger("hidden.bs.collapse").removeClass("collapsing").addClass("collapse"
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 61 72 20 63 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 63 7c 7c 28 63 3d 62 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 63 3d 63 26 26 2f 23 5b 41 2d 5a 61 2d 7a 5d 2f 2e 74 65 73 74 28 63 29 26 26 63 2e 72 65 70 6c 61 63 65 28 2f 2e 2a 28 3f 3d 23 5b 5e 5c 73 5d 2a 24 29 2f 2c 22 22 29 29 3b 76 61 72 20 64 3d 63 26 26 61 28 63 29 3b 72 65 74 75 72 6e 20 64 26 26 64 2e 6c 65 6e 67 74 68 3f 64 3a 62 2e 70 61 72 65 6e 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 64 3d 63 2e 64 61 74 61 28 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 29 3b 64 7c 7c 63 2e 64 61 74 61 28 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 Data Ascii: ar c=b.attr("data-target");c\|\|(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.(?=#[^\s]$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}function d(b){return this.each(function(){var c=a(this),d=c.data("bs.dropdown");d\|\|c.data("bs.dropdown"
2024-10-23 22:50:45 UTC	1369	IN	Data Raw: 69 2e 65 71 28 6a 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 7d 7d 7d 3b 76 61 72 20 68 3d 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3b 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3d 64 2c 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 67 2c 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 64 72 6f 70 64 6f 77 6e 3d 68 2c 74 68 69 73 7d 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 62 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 22 2e 64 72 6f 70 64 6f 77 6e 20 66 6f 72 6d 22 2c 66 Data Ascii: i.eq(j).trigger("focus")}}}};var h=a.fn.dropdown;a.fn.dropdown=d,a.fn.dropdown.Constructor=g,a.fn.dropdown.noConflict=function(){return a.fn.dropdown=h,this},a(document).on("click.bs.dropdown.data-api",b).on("click.bs.dropdown.data-api",".dropdown form",f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.10	49805	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	378	OUT	GET /files/2024/06/Krista-Little-scaled.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	473	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:04:22 GMT server: Apache content-length: 629609 last-modified: Tue, 25 Jun 2024 22:32:56 GMT etag: "53347bcb48d25d062068bce3773b7ef9" expires: Sat, 25 Dec 2027 07:51:02 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout13-pr x-varnish: 650969426 640844966 age: 2782 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:45 UTC	14052	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 0a 00 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-10-23 22:50:45 UTC	1448	IN	Data Raw: 33 52 86 c9 49 c5 29 6c f6 c5 33 34 dd c6 99 36 24 26 93 34 c0 c6 97 77 af 14 c5 61 ae 70 69 14 9a 71 50 dd e8 0a 07 a9 aa 4c 07 03 91 52 6e ed da 98 bf 8d 3f 6f 5a 77 26 c3 83 1a 70 6c 9e d5 1a b6 40 a7 a9 39 e9 4c 43 89 fa 53 73 f4 a7 12 7b d3 0f 5a ad 89 62 86 a7 0e 45 32 9c 0f 1c d2 6c 12 14 1a 70 3c 53 38 a7 7b 52 b8 c9 07 4a 7a 9a 89 49 a7 ab 92 71 c5 5c 5e 84 b2 50 69 8e 79 a5 07 90 29 1f ad 0c 69 90 48 78 23 bd 66 5d f5 cd 69 cb f2 8e 39 cd 66 5c 9c e7 da b9 a6 cd 62 63 dd b0 dc 78 aa 40 7c c4 d5 bb a2 59 ba d5 50 39 ac 56 e6 d6 ea 5b b7 1b 9b da b5 a0 1d 07 7a cb b5 1f 30 f7 ad 68 00 24 63 b5 6f 13 29 97 a2 1b 71 56 73 f9 d4 31 0c ad 49 d2 ba 23 23 01 e0 d4 a8 f8 ed 50 64 d3 d5 8d 0e 41 ca 58 56 dc 78 e2 a5 04 91 d7 15 04 67 b7 53 52 86 ed 8a 86 Data Ascii: 3RI)l346$&4wapiqPLRn?oZw&pl@9LCSs{ZbE2lp<S8{RJzIq\^Piy)iHx#f]i9f\bcx@\|YP9V[z0h$co)qVs1I##PdAXVxgSR
2024-10-23 22:50:45 UTC	7240	IN	Data Raw: 40 bf 2f 6a b7 1f 1c 62 86 c0 b7 19 cd 58 4a af 1f 4f c2 a7 43 59 5c 19 21 f5 a3 a9 a4 06 94 0c d0 2d 85 18 e9 4f c7 14 80 52 9a 01 b1 3b d0 c3 22 97 6f a1 e6 8f 6a 04 44 45 35 b8 a9 0f d2 9a 68 29 0d 5e 68 23 34 ed b4 98 a6 32 3c 0a 00 e6 9d 8c 71 48 ab cf 4a b2 47 0a 5c d2 52 d4 bd 81 0f 53 8a 99 48 da 0d 40 06 6a 51 c0 a9 43 64 9d a9 bd a9 7b 7b d3 4f 4e ff 00 95 31 26 28 3c d2 12 68 38 ec 4d 36 8b d8 37 1c 18 8a 5e bc d3 0d 2a d1 70 b1 30 e0 53 f2 6a 31 d2 9c 29 93 60 1c 53 d4 fa 52 10 31 da 93 a5 5a 64 d8 76 e3 9e d4 12 69 a0 7b d2 33 55 5c 96 87 64 d1 b8 d3 33 49 93 eb 48 09 b3 de 9c a4 9a 87 71 f5 a7 a9 3e b4 58 2c 4c bd 69 7b d3 53 ad 4a 45 34 26 85 52 77 0a 1c f3 48 3a 50 5b 8e 68 6f 41 25 a9 14 c4 62 b2 ae b8 2d 5a b2 f7 f5 ac 9b 9f e2 ae 79 1b Data Ascii: @/jbXJOCY\!-OR;"ojDE5h)^h#42<qHJG\RSH@jQCd{{ON1&(<h8M67^*p0Sj1)`SR1Zdvi{3U\d3IHq>X,Li{SJE4&RwH:P[hoA%b-Zy
2024-10-23 22:50:46 UTC	16384	IN	Data Raw: a3 7e 95 29 1c 75 a8 9f a6 28 28 ae fc f5 a8 1b 03 b5 4e c7 ad 42 e3 d2 9a 06 42 79 63 40 eb 4b b7 1d e8 e3 d6 b4 4c 91 c3 ad 4a bc d4 2b 53 25 3b 88 95 3a 9a 72 9c 66 98 b4 ea 4c 07 74 a4 cd 04 8a 42 32 2a 18 07 ca 68 a6 80 47 61 4e c5 49 63 85 3e 3e f5 18 3d a9 f1 9e 68 02 4a 07 5a 33 4a bf 4a 00 70 e2 85 a5 a4 5e b8 a4 c0 91 4e 2a 52 7e 51 51 10 47 56 cd 49 8c 81 52 c6 3d 73 8e 79 3e b4 bf 5a 45 e9 4a 6a 40 89 c7 34 31 21 69 cf d6 a3 76 c8 ef 9a 2d b1 43 0f 1d 6a 26 eb 52 b9 24 54 27 ad 6a 0c 82 4e a6 a3 f5 a9 5c 64 9a 8c f1 54 88 64 74 9c e7 ad 3f 14 d3 d7 a5 32 43 34 a3 22 94 63 d2 9e 17 34 c4 34 02 7a 75 a7 2a f3 9a 70 5c 0c e6 95 45 17 00 1d 6a 50 09 a6 2a f3 52 85 3d 68 b8 0a a2 9c 06 3b 52 0c 8e 48 a7 67 eb 4a e0 38 70 29 ea 32 79 a6 d3 d6 9a 01 Data Ascii: ~)u((NBByc@KLJ+S%;:rfLtB2hGaNIc>>=hJZ3JJp^NR~QQGVIR=sy>ZEJj@41!iv-Cj&R$T'jN\dTdt?2C4"c44zup\EjPR=h;RHgJ8p)2y
2024-10-23 22:50:46 UTC	3888	IN	Data Raw: 4b d0 d5 99 09 35 5a 5e 94 d3 13 dc ae 4f 34 0e 69 58 73 42 8f 6a a4 c4 c7 85 e4 55 a8 8e 31 55 d7 9e b5 66 25 e2 81 16 54 54 88 29 89 53 2d 20 24 41 de a4 1c 9a 6a 03 8a 91 47 34 98 0f 14 e5 a4 54 a7 81 db ad 4b 06 28 f5 a7 9e 46 45 37 18 a7 a9 38 e9 52 40 cc 1e f4 77 a7 e7 3d 45 34 f1 45 c6 86 b2 03 4d 0b 4f 1c d2 e0 51 72 88 fa 7a 52 63 da a4 2a 29 31 57 71 8c c5 1b 7d e9 71 ed 47 7a 2e 00 38 a4 63 41 a4 eb 54 20 04 e3 8a 02 e4 d2 74 a0 13 9a 02 c1 8a 6d 3c e3 14 d5 e6 81 5b 50 cd 38 74 e6 90 8c 52 13 c5 02 14 f1 d2 9b b8 81 46 78 34 dc d0 52 03 d6 93 1e f4 b4 75 14 0a c4 6e 3b d3 7a f1 4e 6e 78 a4 0b 40 85 55 a7 85 c1 eb 48 b9 cd 38 1e 68 2a c3 95 79 ef 43 8f ad 28 a4 7c d0 26 37 68 cf 06 90 d3 94 1f 4a 69 eb 40 d6 c2 1a 5e d9 c5 18 c7 bd 38 50 4b 05 Data Ascii: K5Z^O4iXsBjU1Uf%TT)S- $AjG4TK(FE78R@w=E4EMOQrzRc)1Wq}qGz.8cAT tm<[P8tRFx4Run;zNnx@UH8hyC(\|&7hJi@^8PK
2024-10-23 22:50:46 UTC	1448	IN	Data Raw: e0 62 9a 40 f5 a0 08 5c 55 39 ba 55 c7 3d 45 55 94 71 40 14 24 cd 54 93 ad 5d 94 62 a9 c8 33 5a 21 5c 8c 10 07 4a 72 f5 cd 33 3c d3 81 c1 e9 56 a2 c4 5b 88 e4 8a b2 9d 6a a4 4d 82 2a d2 9f 4a 1a 11 3a 9e 2a 45 35 00 39 a9 05 48 12 06 a7 8f 5a 88 7b 53 83 fb d4 d8 07 6e e7 a7 14 e2 dc 74 e2 a3 cf 3e fe b4 bb cd 21 8e dd 8a 32 4f 63 4d 04 7b 52 e5 4f 5a 2c 17 17 19 cd 2a 03 8c 1a 3e 86 80 71 da 8b 30 24 ed cf 5e d4 bc d3 03 fb 52 ee 3e 94 9a 1a 1d 4b 4c dd 46 ea 56 1d c7 13 8a 4d d4 85 b0 29 81 db 3d 38 a2 c0 3c f3 4b 51 34 84 1a 55 72 7a 8c 53 b0 12 d2 e2 a3 f7 a7 06 34 58 57 17 14 a0 77 a4 c9 ef 4e 07 22 95 82 e0 38 a4 a5 34 62 9a 42 6c 3b 54 62 a5 ed d6 90 a0 eb 9c 53 04 c6 a1 1b aa 41 c9 a6 aa e0 f0 4d 3f 90 7d 68 06 39 79 34 e2 3e 6c 0a 45 f5 a7 83 ce Data Ascii: b@\U9U=EUq@$T]b3Z!\Jr3<V[jMJ:E59HZ{Snt>!2OcM{ROZ,*>q0$^R>KLFVM)=8<KQ4UrzS4XWwN"84bBl;TbSAM?}h9y4>lE
2024-10-23 22:50:46 UTC	1448	IN	Data Raw: 3d 79 35 1b 1f 4a 72 56 c9 12 dd 8b 29 56 63 e9 55 a3 e0 8a b3 1f a5 29 46 e0 a4 4c a6 9e 0f bd 45 92 3a 51 b8 fa e2 a1 c4 2e 4e 0e 47 34 fd c3 1d 05 57 52 4f 72 69 49 3e b5 2c 2e 49 bc 62 8d f4 d0 46 3a 51 ba 95 87 71 fb bd a9 37 d3 4b 52 13 45 85 72 65 90 fa d2 ee cd 41 9c 53 95 bb 03 cd 30 b9 30 63 4b bd b1 d6 a1 66 c1 1f ce 9d b8 fb 51 60 e6 44 99 23 9e b4 17 35 11 73 9e b4 9b bd 28 e5 17 31 2e f6 f5 a4 de dd 8d 46 09 23 8a 4d c7 bd 2e 51 f3 12 86 6c f3 8a 76 ef 5a ae 24 c1 c5 3b 7e 69 59 8d 32 c6 4f b5 28 6c 9a 83 27 d7 8f 5a 91 72 7b 8a 76 15 c9 41 a7 67 1d 2a 34 07 3d 69 c7 20 f5 a5 61 8f 53 93 cd 38 9c 76 a8 79 f5 a9 39 f5 a0 07 e4 52 52 63 8f 7a 5c d1 60 14 7a e2 9c 06 e3 48 3a 52 8c e7 8a 76 01 c3 8a 70 ce 29 38 a5 03 22 90 0a 3a d0 4f 3f d6 93 Data Ascii: =y5JrV)VcU)FLE:Q.NG4WROriI>,.IbF:Qq7KREreAS00cKfQ`D#5s(1.F#M.QlvZ$;~iY2O(l'Zr{vAg*4=i aS8vy9RRcz\`zH:Rvp)8":O?
2024-10-23 22:50:46 UTC	2896	IN	Data Raw: 86 01 cf 34 1c 76 e6 94 93 4d 2d c5 1c 8c 2e 2f 18 a5 18 c7 1c 8f 7a 8f 76 0f 4c d0 5f 9c 53 b0 36 4b bb 14 bd 7d 2a 3d c3 00 53 0b aa fa 53 48 86 c9 87 1d 49 a4 2f 8f 4a 83 ce 04 63 34 d3 28 07 ad 57 23 25 48 b1 bc 8e 98 a6 f9 87 35 0f 9b cf 04 d3 8c be bc d1 ec c7 ce 4e 18 77 eb 4e 18 22 ab ab 6e 1c 1e 7d 29 e5 c2 f1 ce 68 e4 1f 39 2a a8 cf 5a 95 7e 5e ad 8a ac 8f f3 70 31 f5 a9 03 03 d3 ad 47 b3 1f b4 2c 29 5f ef 7e b4 ec 8c 70 c0 d5 7c e3 af 7a 76 47 1d e8 e4 1f 31 32 b9 ef 4e 56 e3 ad 44 bc 8e 45 3c 60 75 35 0e 36 1a 91 26 ef 7a 7a 91 eb 9a 8f 1c 71 8a 17 02 95 8a 52 26 07 1d c5 2e 47 b5 45 b8 0e 94 6f c6 09 34 15 72 c0 07 14 e0 db 7b 54 02 42 dd 0d 28 90 8e bc d2 b0 5c 94 93 4a 1e 9a 39 14 63 d2 8b 15 71 cb d6 95 87 cb 42 d2 9a 2c 21 8d d2 a3 c7 3c Data Ascii: 4vM-./zvL_S6K}=SSHI/Jc4(W#%H5NwN"n})h9Z~^p1G,)_~p\|zvG12NVDE<`u56&zzqR&.GEo4r{TB(\J9cqB,!<
2024-10-23 22:50:46 UTC	16384	IN	Data Raw: 6a 77 e3 40 00 00 f7 a7 a9 a6 80 48 a7 01 8a 4c 07 52 d2 01 4e 22 90 09 de 97 02 92 8c 9a 00 31 45 14 a0 0a 2e 31 a4 53 48 a7 93 8e 94 d3 96 eb 54 02 63 8a 61 5c e7 da 9c 72 38 ff 00 22 9a 7a d0 21 94 87 1e b4 ef ca 99 9e 69 a0 18 fd 6a 22 c7 35 2b f5 e2 a3 c7 3d 2a 91 2c 7c 58 3d aa d2 0e 38 aa f1 ad 59 5c 85 1d 2a 5e e5 21 1b 9a 85 8f 3d aa 76 e9 50 91 9a 40 31 98 e2 a1 6f 7a 95 80 a8 64 eb 40 08 3a d4 a9 50 8e b5 2c 74 01 30 1c 52 8a 07 4a 51 d6 81 32 40 0e 7a 54 83 8a 60 eb 52 0e 94 02 0e a6 9c 06 29 a7 b7 f9 c5 28 eb d7 34 98 c7 28 eb 4f 5c fa 53 07 4a 72 f5 a6 02 9e 69 d8 c0 a4 fc a9 d8 e3 34 00 50 40 ee 28 a4 6a 40 21 c7 6a 69 3c d2 d2 10 33 4c 05 ea 29 71 9a 45 a5 19 a4 c0 70 f4 a5 18 27 ad 34 53 c7 5a 96 02 d2 91 c5 28 14 1a 43 22 23 9a 6b 0c 7f Data Ascii: jw@HLRN"1E.1SHTca\r8"z!ij"5+=,\|X=8Y\^!=vP@1ozd@:P,t0RJQ2@zT`R)(4(O\SJri4P@(j@!ji<3L)qEp'4SZ(C"#k
2024-10-23 22:50:46 UTC	16384	IN	Data Raw: df 27 8a 7d ac 4d 34 a7 1c 80 32 49 ef 4d 39 97 03 20 81 d0 0a d0 8e 03 6d 66 3f 7a 13 cc c6 40 19 20 55 bd 89 d4 ad 2c 92 26 42 80 03 72 78 a8 02 b0 57 95 d8 1c 7a 1e 6a db 45 0f 03 cc 2c d8 e3 22 a5 8a de df ce 44 74 32 22 e0 90 a7 92 6a 6f 64 3b 5c 2c 20 16 71 3d d3 92 18 8f 97 3e 95 11 9e 4b a9 f7 85 2b 8e 4e de f9 ad 1d 48 88 a3 58 e3 84 c4 84 7f 11 cd 3a cb 4f b8 b9 b5 69 43 88 d5 06 37 63 8e 2a 1c 9d ae 3e 5d 0c e9 6c e5 99 55 22 04 b9 27 ad 5e b3 d1 63 81 08 bb 9c 42 a4 65 f1 f7 be 82 ac 29 8a de 0f 32 35 69 e6 3d 24 c6 02 9a 86 4b 79 c7 c8 1b ce 9a 41 93 95 e9 4b 99 ec 37 14 58 17 b0 5b b3 db e9 70 2c 31 20 cb 4a 79 66 f7 cd 63 5f dd 4f aa dc 1d ee cf d8 12 7f 5a b5 77 6f 2d a6 2d 62 23 7c a7 f7 84 1e be d4 91 d9 7d 9b 95 21 5f 61 2c 4f 38 ab 5d Data Ascii: '}M42IM9 mf?z@ U,&BrxWzjE,"Dt2"jod;\, q=>K+NHX:OiC7c*>]lU"'^cBe)25i=$KyAK7X[p,1 Jyfc_OZwo--b#\|}!_a,O8]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.10	49803	142.250.186.68	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	511	OUT	GET /recaptcha/api.js?render=6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV&ver=A.3.49.20241022.0.6 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:45 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 23 Oct 2024 22:50:45 GMT Date: Wed, 23 Oct 2024 22:50:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:45 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-23 22:50:45 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-10-23 22:50:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.10	49806	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:45 UTC	787	OUT	GET /s/player/a62d836d/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:46 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 392635 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 20:40:00 GMT Expires: Thu, 23 Oct 2025 20:40:00 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 7846 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:46 UTC	698	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e Data Ascii: deo-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparen
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d Data Ascii: d-error .html5-video-container{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-m
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f Data Ascii: ng) .ytp-player-content:not(.ytp-upnext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-auto
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2c 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 Data Ascii: ytp-button[aria-disabled=true],.html5-video-player .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 68 65 69 67 68 74 3a 35 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 Data Ascii: }.ytp-big-mode .ytp-chrome-bottom{height:54px;padding-top:4px}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-b
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 2d 62 75 74 74 6f 6e 29 20 73 76 67 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 Data Ascii: -button) svg,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{pa
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 6f 6e 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: one}.ytp-chrome-controls .ytp-button[aria-pressed]{position:relative}.ytp-chrome-controls .ytp-button[aria-pressed]::after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-t
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 32 37 70 78 3b 6c 65 66 74 3a 31 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 74 Data Ascii: big-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]::after{width:27px;left:14px}.ytp-embed-mobile .ytp-chrome-controls .ytp-button[aria-pressed=true]::after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]::aft
2024-10-23 22:50:46 UTC	1378	IN	Data Raw: 74 7d 2e 79 74 70 2d 6c 65 66 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 6c 65 66 74 2d 63 6f 6e 74 72 6f 6c 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 Data Ascii: t}.ytp-left-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-left-controls{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bott

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.10	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:46 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225046Z-16849878b78c2tmb7nhatnd68s00000006zg0000000001wc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.10	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:46 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 40a513cc-e01e-0051-0ef3-2484b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225046Z-r197bdfb6b429k2s6br3k49qn40000000440000000002mcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.10	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:46 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225046Z-16849878b785g992cz2s9gk35c00000006t000000000uu5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.10	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:46 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225046Z-15b8d89586frzkk2umu6w8qnt80000000ddg000000004wev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.10	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225046Z-16849878b78dghrpt8v731n7r400000006rg00000000d8ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.10	49821	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	618	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-http-c116f92f0229e7d6b2e3c93875c6b21e.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:47 UTC	509	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:16 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:16 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:16 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout13-pr x-varnish: 655327830 27329331 age: 100170 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 166276 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:47 UTC	14016	IN	Data Raw: 76 61 72 20 53 72 65 48 74 74 70 3b 53 72 65 48 74 74 70 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 72 65 48 74 74 70 28 6e 61 6d 65 29 7b 74 68 69 73 2e 71 75 65 75 65 3d 6e 65 77 20 24 2e 61 6a 51 75 65 75 65 28 29 3b 74 68 69 73 2e 6e 61 6d 65 3d 6e 61 6d 65 3b 7d 0a 53 72 65 48 74 74 70 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 5f 74 68 73 3b 5f 74 68 73 3d 74 68 69 73 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 3d 3d 6e 75 6c 6c 29 7b 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 3d 74 72 75 65 3b 7d 0a 6f 70 74 69 6f 6e 73 2e 74 69 6d 65 6f 75 74 3d 6f 70 74 69 6f 6e 73 2e 74 69 6d 65 6f 75 74 7c 7c 33 30 30 30 30 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 71 Data Ascii: var SreHttp;SreHttp=(function(){function SreHttp(name){this.queue=new $.ajQueue();this.name=name;}SreHttp.prototype.post=function(options){var _ths;_ths=this;if(options.queue==null){options.queue=true;}options.timeout=options.timeout\|\|30000;if(options.q
2024-10-23 22:50:47 UTC	2896	IN	Data Raw: 69 74 65 73 22 29 2e 70 61 72 65 6e 74 28 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 29 3d 3d 3d 22 61 63 74 69 76 65 22 29 7b 53 52 45 2e 6d 61 70 2e 72 65 6d 6f 76 65 45 6e 74 69 74 69 65 73 28 29 3b 53 52 45 2e 66 61 76 6f 72 69 74 65 73 2e 67 65 74 46 61 76 6f 72 69 74 65 73 28 29 3b 72 65 74 75 72 6e 20 24 5f 28 22 2e 74 69 70 73 79 22 29 2e 72 65 6d 6f 76 65 28 29 3b 7d 7d 7d 29 3b 7d 3b 53 72 65 46 61 76 6f 72 69 74 65 73 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 46 61 76 6f 72 69 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 74 68 73 3b 5f 74 68 73 3d 74 68 69 73 3b 53 52 45 2e 68 65 6c 70 65 72 2e 70 72 65 73 65 6e 74 4c 6f 61 64 65 72 28 29 3b 72 65 74 75 72 6e 20 53 52 45 2e 61 75 74 68 2e 63 68 65 63 6b 43 75 72 72 65 6e 74 55 73 Data Ascii: ites").parent().attr("class")==="active"){SRE.map.removeEntities();SRE.favorites.getFavorites();return $_(".tipsy").remove();}}});};SreFavorites.prototype.getFavorites=function(){var _ths;_ths=this;SRE.helper.presentLoader();return SRE.auth.checkCurrentUs
2024-10-23 22:50:47 UTC	8688	IN	Data Raw: 61 67 65 5b 30 5d 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 6f 2e 6c 69 73 74 69 6e 67 2e 69 6d 61 67 65 3d 5b 6f 2e 6c 69 73 74 69 6e 67 2e 69 6d 61 67 65 5d 3b 7d 0a 6f 2e 6c 69 73 74 5f 70 72 69 63 65 3d 22 4f 66 66 20 4d 61 72 6b 65 74 22 3b 69 66 28 6f 2e 6c 69 73 74 69 6e 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 64 64 72 65 73 73 21 3d 3d 22 4f 66 66 20 4d 61 72 6b 65 74 20 4c 69 73 74 69 6e 67 22 29 7b 74 6d 70 5f 6c 69 73 74 69 6e 67 5f 61 72 72 61 79 2e 70 75 73 68 28 6f 2e 6c 69 73 74 69 6e 67 29 3b 75 73 65 72 5f 63 6f 6d 6d 65 6e 74 5f 61 72 72 61 79 2e 70 75 73 68 28 6f 2e 75 73 65 72 5f 63 6f 6d 6d 65 6e 74 73 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 5b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 5d 22 29 2e 72 65 70 6c 61 63 65 Data Ascii: age[0]==="undefined"){o.listing.image=[o.listing.image];}o.list_price="Off Market";if(o.listing.location.address!=="Off Market Listing"){tmp_listing_array.push(o.listing);user_comment_array.push(o.user_comments.replace(/</g,"[").replace(/>/g,"]").replace
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 2e 68 65 69 67 68 74 28 29 3b 69 66 28 77 69 6e 57 69 64 74 68 3c 32 32 34 29 7b 65 6c 65 6d 65 6e 74 2e 63 73 73 28 27 6c 65 66 74 27 2c 27 30 27 29 3b 65 6c 65 6d 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 2c 27 31 35 70 78 27 29 3b 7d 0a 69 66 28 77 69 6e 48 65 69 67 68 74 3c 36 34 30 29 7b 65 6c 65 6d 65 6e 74 2e 63 73 73 28 27 74 6f 70 27 2c 27 31 30 30 70 78 27 29 3b 65 6c 65 6d 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 74 6f 70 27 2c 27 30 27 29 3b 7d 0a 72 65 74 75 72 6e 20 24 2e 61 6a 61 78 28 7b 75 72 6c 3a 73 65 72 76 69 63 65 52 65 71 75 65 73 74 55 72 6c 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 70 22 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 28 22 23 77 6d 73 5f 65 6d 61 69 6c Data Ascii: .height();if(winWidth<224){element.css('left','0');element.css('margin-left','15px');}if(winHeight<640){element.css('top','100px');element.css('margin-top','0');}return $.ajax({url:serviceRequestUrl,dataType:"jsonp",success:function(){jQuery("#wms_email
2024-10-23 22:50:47 UTC	992	IN	Data Raw: 2c 63 6f 6e 74 65 78 74 29 2e 76 61 6c 28 29 29 7b 71 73 2b 3d 27 26 61 72 65 61 5f 6f 66 5f 69 6e 74 65 72 65 73 74 3d 27 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6a 51 75 65 72 79 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 77 6d 73 5f 65 63 5f 79 6f 75 72 5f 69 6e 74 65 72 65 73 74 5d 22 2c 63 6f 6e 74 65 78 74 29 2e 76 61 6c 28 29 29 3b 7d 0a 69 66 28 6a 51 75 65 72 79 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 6c 65 61 64 5f 73 6f 75 72 63 65 5d 22 29 2e 6c 65 6e 67 74 68 26 26 6a 51 75 65 72 79 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 6c 65 61 64 5f 73 6f 75 72 63 65 5d 22 2c 63 6f 6e 74 65 78 74 29 2e 76 61 6c 28 29 29 7b 71 73 2b 3d 27 26 6c 65 61 64 5f 73 6f 75 72 63 65 3d 27 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6a Data Ascii: ,context).val()){qs+='&area_of_interest='+encodeURIComponent(jQuery("input[name=wms_ec_your_interest]",context).val());}if(jQuery("input[name=lead_source]").length&&jQuery("input[name=lead_source]",context).val()){qs+='&lead_source='+encodeURIComponent(j
2024-10-23 22:50:47 UTC	2896	IN	Data Raw: 3b 71 73 2b 3d 27 26 6c 65 61 64 5f 74 72 61 78 5f 73 6f 75 72 63 65 5f 63 61 74 65 67 6f 72 79 3d 27 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 4c 69 73 74 69 6e 67 20 64 65 74 61 69 6c 22 29 3b 76 61 72 20 69 73 5f 63 32 31 5f 73 63 68 65 65 74 7a 5f 62 72 6f 6b 65 72 61 67 65 5f 73 69 74 65 5f 6c 69 73 74 69 6e 67 3d 28 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 69 74 65 74 79 70 65 22 29 3d 3d 22 42 72 6f 6b 65 72 61 67 65 20 57 65 62 73 69 74 65 22 26 26 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 6d 70 61 6e 79 74 6f 6b 65 6e 22 29 3d 3d 22 33 32 33 30 37 33 37 22 26 26 57 78 2e 64 61 74 61 2e 6c 69 73 74 69 6e 67 5f 64 65 74 61 69 6c 2e 63 6f 6d 70 61 6e 79 5f 75 75 69 64 3d 3d 22 Data Ascii: ;qs+='&lead_trax_source_category='+encodeURIComponent("Listing detail");var is_c21_scheetz_usererage_site_listing=($("body").attr("data-sitetype")=="usererage Website"&&$("body").attr("data-companytoken")=="3230737"&&Wx.data.listing_detail.company_uuid=="
2024-10-23 22:50:47 UTC	1448	IN	Data Raw: 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 2c 6c 65 61 64 5f 6d 65 73 73 61 67 65 3a 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 6d 65 73 73 61 67 65 2c 63 6f 6d 70 61 6e 79 5f 75 75 69 64 3a 6a 51 75 65 72 79 28 27 62 6f 64 79 27 29 2e 61 74 74 72 28 27 64 61 74 61 2d 63 6f 6d 70 61 6e 79 74 6f 6b 65 6e 27 29 2c 73 6f 75 72 63 65 5f 74 79 70 65 3a 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 73 69 74 65 74 79 70 65 22 29 2c 73 6f 75 72 63 65 5f 63 61 74 65 67 6f 72 79 5f 6b 65 79 3a 22 67 65 6e 65 72 69 63 5f 63 6f 6e 74 61 63 74 5f 66 6f 72 6d 22 7d 3b 69 66 28 6a 51 75 65 72 79 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 77 6d 73 5f 65 63 5f 6f 66 66 69 63 65 5f 75 75 69 64 5d 22 2c 63 6f 6e 74 65 78 74 29 2e 6c 65 6e 67 74 Data Ascii: .agent_email,lead_message:internal_route_params.message,company_uuid:jQuery('body').attr('data-companytoken'),source_type:$("body").attr("data-sitetype"),source_category_key:"generic_contact_form"};if(jQuery("input[name=wms_ec_office_uuid]",context).lengt
2024-10-23 22:50:47 UTC	14480	IN	Data Raw: 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 3d 41 4f 53 2e 73 69 74 65 5f 70 72 6f 66 69 6c 65 5f 65 6d 61 69 6c 3b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 6e 61 6d 65 3d 41 4f 53 2e 73 69 74 65 5f 70 72 6f 66 69 6c 65 5f 65 6d 61 69 6c 3b 7d 0a 69 66 28 6d 65 73 73 61 67 65 50 61 72 61 6d 73 5b 27 61 6f 73 5f 65 6d 61 69 6c 5f 6c 65 61 64 5f 72 6f 75 74 69 6e 67 5f 72 65 6d 6f 76 65 5f 61 67 65 6e 74 5f 65 6d 61 69 6c 27 5d 29 7b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 65 6d 61 69 6c 3d 27 27 3b 69 6e 74 65 72 6e 61 6c 5f 72 6f 75 74 65 5f 70 61 72 61 6d 73 2e 61 67 65 6e 74 5f 6e 61 6d 65 3d 27 27 3b 7d 0a 69 66 28 6d 65 73 73 61 67 65 50 61 Data Ascii: oute_params.agent_email=AOS.site_profile_email;internal_route_params.agent_name=AOS.site_profile_email;}if(messageParams['aos_email_lead_routing_remove_agent_email']){internal_route_params.agent_email='';internal_route_params.agent_name='';}if(messagePa
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 63 72 6f 6c 6c 54 6f 70 28 29 3b 76 61 72 20 65 5f 77 3d 6a 51 75 65 72 79 28 22 23 6c 6f 61 64 69 6e 67 5f 6d 65 73 73 61 67 65 22 29 2e 77 69 64 74 68 28 29 2f 32 3b 76 61 72 20 65 5f 68 3d 6a 51 75 65 72 79 28 22 23 6c 6f 61 64 69 6e 67 5f 6d 65 73 73 61 67 65 22 29 2e 68 65 69 67 68 74 28 29 2f 32 3b 7d 65 6c 73 65 7b 76 61 72 20 78 3d 6a 51 75 65 72 79 28 22 23 22 2b 63 6f 6e 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 3b 76 61 72 20 79 3d 6a 51 75 65 72 79 28 22 23 22 2b 63 6f 6e 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 76 61 72 20 77 3d 6a 51 75 65 72 79 28 22 23 22 2b 63 6f 6e 29 2e 77 69 64 74 68 28 29 3b 76 61 72 20 68 3d 6a 51 75 65 72 79 28 22 23 22 2b 63 6f 6e 29 2e 68 65 69 67 68 74 28 29 3b 76 61 72 20 73 3d 30 3b 76 61 72 20 65 5f 77 Data Ascii: crollTop();var e_w=jQuery("#loading_message").width()/2;var e_h=jQuery("#loading_message").height()/2;}else{var x=jQuery("#"+con).offset().left;var y=jQuery("#"+con).offset().top;var w=jQuery("#"+con).width();var h=jQuery("#"+con).height();var s=0;var e_w
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 29 3b 73 69 7a 65 56 65 72 74 69 63 61 6c 53 63 72 6f 6c 6c 62 61 72 28 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 69 7a 65 56 65 72 74 69 63 61 6c 53 63 72 6f 6c 6c 62 61 72 28 29 0a 7b 76 65 72 74 69 63 61 6c 54 72 61 63 6b 2e 68 65 69 67 68 74 28 76 65 72 74 69 63 61 6c 54 72 61 63 6b 48 65 69 67 68 74 2b 27 70 78 27 29 3b 76 65 72 74 69 63 61 6c 44 72 61 67 50 6f 73 69 74 69 6f 6e 3d 30 3b 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 73 65 74 74 69 6e 67 73 2e 76 65 72 74 69 63 61 6c 47 75 74 74 65 72 2b 76 65 72 74 69 63 61 6c 54 72 61 63 6b 2e 6f 75 74 65 72 57 69 64 74 68 28 29 3b 70 61 6e 65 2e 77 69 64 74 68 28 70 61 6e 65 57 69 64 74 68 2d 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2d 6f 72 69 67 69 6e 61 6c 50 61 64 64 69 6e 67 54 6f 74 61 6c Data Ascii: );sizeVerticalScrollbar();}}function sizeVerticalScrollbar(){verticalTrack.height(verticalTrackHeight+'px');verticalDragPosition=0;scrollbarWidth=settings.verticalGutter+verticalTrack.outerWidth();pane.width(paneWidth-scrollbarWidth-originalPaddingTotal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.10	49820	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	577	OUT	GET /images/customarea/responsive/default/background/external/nature4.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:47 UTC	461	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:04:25 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:39:04 GMT content-length: 193486 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 22:04:25 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout11-pr x-varnish: 650249469 643664056 age: 2782 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:47 UTC	2480	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 03 03 04 03 05 04 04 05 07 05 04 05 07 09 07 05 05 07 09 0a 08 08 09 08 08 0a 0d 0a 0a 0a 0a 0a 0a 0d 0a 0c 0d 0e 0d 0c 0a 10 10 11 11 10 10 17 17 17 17 17 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff db 00 43 01 06 06 06 0b 0a 0b 14 0d 0d 14 16 12 0f 12 16 1b 1b 1b 1b 1b 1b 1b 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 04 9e 08 98 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 01 01 00 03 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 ff c4 00 5d 10 00 02 02 00 04 03 04 06 04 0b 03 07 08 08 03 09 00 01 02 11 03 12 21 31 04 41 51 05 13 61 71 06 07 14 22 81 91 32 a1 b1 d4 08 Data Ascii: JFIFHHCC]!1AQaq"2
2024-10-23 22:50:47 UTC	11584	IN	Data Raw: de 14 a6 c8 a1 51 58 98 26 99 98 5e 41 0e b4 54 45 42 40 14 34 41 6b b9 44 d0 51 ae db 10 54 05 af f1 02 e9 d0 a0 20 a8 0b 50 aa 26 44 aa 8a b0 db 6a 8c d3 56 ce 6d 4b 49 66 e8 94 dd b5 bf 91 16 da 22 8b fa 8b 4c cc a2 96 c9 59 90 b5 d2 c4 ac 36 92 46 5a a5 a3 23 4a be 65 06 c1 96 4d 32 d5 68 46 96 b4 05 44 68 3f e9 84 15 cc 0a 9e c5 44 96 e1 69 04 a3 94 b6 94 1d 6c 45 12 6a d9 59 65 a3 4c aa d0 14 66 9d 91 64 24 54 1a 90 5e 65 20 e5 d3 4f 89 1a a3 a1 08 39 79 7d 44 6a 85 00 f4 0a d2 49 d6 81 0b 8e a2 ca 0e 08 2d 32 e3 c8 ac d1 58 7e 02 ca 39 51 2c a4 92 f8 95 9a 0d 04 98 65 94 98 73 92 d6 cd 31 4c b8 f4 05 0c ae c2 51 cb ad b0 32 fc 00 cb aa b2 ab 34 b7 08 a4 ba 16 d1 96 ac ac 87 f5 80 04 40 05 45 e6 45 4c 01 bd 7c 8a 89 be 9a 11 a4 ec a8 af a0 44 80 ae Data Ascii: QX&^ATEB@4AkDQT P&DjVmKIf"LY6FZ#JeM2hFDh?DilEjYeLfd$T^e O9y}DjI-2X~9Q,es1LQ24@EEL\|D
2024-10-23 22:50:47 UTC	4344	IN	Data Raw: c8 ca 83 4c da 49 04 88 5c 80 9f cc 29 e4 45 b4 ec a8 33 2f 88 2d 57 88 4a 49 02 8b 5b 10 95 4b 70 2a e6 45 5f 60 55 45 12 44 12 88 51 96 44 5a 34 11 50 15 5e c5 29 5f f2 64 6a 0a ba 44 68 81 2f 2a 2a 5a cb fe 05 44 03 b7 f0 02 bd 75 09 62 b7 a2 86 88 02 06 be 0c 01 ff 00 48 25 2d 0a 51 69 b0 aa 95 df d4 12 95 6c 54 49 2a 40 29 20 94 72 e8 51 51 12 92 48 2a 7e 05 24 34 b9 ee 11 29 7c ba 11 57 2d b4 45 28 90 a2 b5 29 4d 65 b6 44 91 28 f3 65 4a 4d 12 cd 59 7d 44 b7 10 39 11 69 ad 09 65 2d 28 08 0d 24 ee d1 42 a2 88 89 5d df d4 06 aa f9 05 a6 68 40 97 cd b2 a1 69 11 57 bb 44 06 5d 0a b4 14 79 04 6f 90 4a 4c 08 a8 9f d4 0a 3a 02 8a d8 12 82 53 54 09 3f 52 0a 98 25 79 12 46 43 4d 33 22 d3 e0 16 8f 91 45 e2 40 d0 55 97 c4 89 4d 50 29 51 1b 41 55 10 22 d2 92 89 Data Ascii: LI\)E3/-WJI[KpE_`UEDQDZ4P^)_djDh/ZDubH%-QilTI@) rQQH*~$4)\|W-E()MeD(eJMY}D9ie-($B]h@iWD]yoJL:ST?R%yFCM3"E@UMP)QAU"
2024-10-23 22:50:47 UTC	1448	IN	Data Raw: ec 08 83 56 46 a2 0d 12 d6 8b 03 3c 80 8a 93 09 20 4c 26 16 96 5b 16 94 72 a1 64 62 68 8a da 89 2d aa 2a 04 5d 5a 58 66 2d d2 31 6b bb 33 6e b1 8b 59 4c b4 34 05 8b 0b 6c db 2b 36 cf 2f dc 1a b0 ff 00 90 19 f7 be 01 61 50 68 5e e4 12 0a 68 85 25 0b e6 5b 5a 2e 02 d2 96 42 5a c6 2d 28 0b 35 6f 27 31 64 e2 b2 d7 98 66 9a f2 2a 14 ba fc 40 54 28 ac d2 c9 7b 95 28 65 d3 a8 16 50 84 82 2a 5a d8 16 cb 66 e1 ce 64 22 b2 b4 23 50 ba d9 11 51 54 50 46 75 e6 56 64 49 6a 54 4d 15 28 38 f4 25 ad 2c b1 25 ae a9 c5 05 d5 50 17 d6 45 a2 d1 14 57 22 b2 6d 0a 2c 32 a3 32 5f 2e a5 66 61 96 69 99 85 4c 09 26 54 a0 10 b7 b1 1a b6 75 09 62 9e e1 2d 28 e8 14 3e 7a 05 0e 33 e8 42 86 5f 91 6c a3 95 96 ca 5d d2 fe 64 d9 ad 43 c2 ae 74 4d 8d 17 74 93 f0 1b 2e 83 bb d8 9b 1a ae ec Data Ascii: VF< L&[rdbh-]ZXf-1k3nYL4l+6/aPh^h%[Z.BZ-(5o'1df@T({(eP*Zfd"#PQTPFuVdIjTM(8%,%PEW"m,22_.faiL&Tub-(>z3B_l]dCtMt.
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: ac da d1 85 54 54 49 01 ad 48 52 d7 98 16 9f c4 2c 2e 60 55 bd 84 49 52 b4 11 36 52 c6 ad d0 66 cd 00 d7 30 d3 2e 90 65 a8 ad 7e c2 2a ad 80 68 02 b5 d4 10 69 f3 23 54 11 16 9a 4b c4 b6 86 fc 00 5c 6d 85 26 5a 55 65 49 55 fe 01 0e b5 41 4d 48 96 44 2c b4 be c1 6d 51 c8 ba 05 54 de db 10 0a 04 6a 21 ba d8 cb 63 9d 12 5a a1 44 b5 a3 94 8b 49 a5 41 29 78 73 28 1a 22 b2 e2 65 59 71 61 53 49 30 8a 9a d7 e4 50 ab b2 59 4d 56 85 b2 89 6d 03 d3 91 2c 4a 3a 01 50 15 14 34 44 39 42 d0 a0 26 b9 d0 b5 0f 76 88 50 ca 03 95 ad 58 14 62 af 5d c2 d1 c9 a9 15 9a 45 65 50 55 4f e2 10 53 af 02 08 a2 ba 2a 15 7b d9 46 af 50 ca d7 4a 2a 14 11 24 80 da 24 91 04 2d 2a d4 14 be c0 4a 2a 52 e6 40 ae 61 69 68 4b 35 3f 61 49 34 a8 8a 75 01 a5 41 5a 51 d0 0a 92 7a 80 90 09 33 2b 4a Data Ascii: TTIHR,.`UIR6Rf0.e~hi#TK\m&ZUeIUAMHD,mQTj!cZDIA)xs("eYqaSI0PYMVm,J:P4D9B&vPXb]EePUOS{FPJ$$-J*R@aihK5?aI4uAZQz3+J
2024-10-23 22:50:47 UTC	5336	IN	Data Raw: 56 25 d1 3b 08 75 02 8c ba ad 0c d3 a4 4b 79 89 4d d8 af 90 64 a8 b2 d2 37 18 b4 54 76 8d 51 16 c5 2b 05 b5 96 08 a8 d7 76 b9 0b 35 2a 0d 6c 2d 9a 6a 11 f9 05 86 f2 12 ca 19 0b 6c ce 0c e5 7f 02 db 34 6f e4 45 6b 70 b4 25 1e 85 b6 67 17 3d 19 59 a1 28 d9 6d 26 19 c8 fa 15 89 85 94 ac d0 7a 04 14 99 a6 26 09 52 20 e4 25 b5 47 28 29 97 19 72 2a 32 69 92 a2 c2 1c b6 40 65 65 2d 65 09 32 28 16 9a d0 2d b1 2b 5c 82 4b 25 65 97 f5 95 19 5e 25 60 3a 02 a0 14 b4 2b 22 a8 0b 39 51 ce 41 91 94 b6 ad 68 65 a0 d5 a3 4c b2 d6 b5 b1 59 94 8d 32 cb 42 d9 a2 2d 75 49 ff 00 30 0b 0a cb 60 39 82 2b 00 53 42 d0 d3 0b 4b 28 29 38 16 12 71 19 3e 45 b4 a3 4b e0 15 7b bf c4 80 6f 98 05 df 81 50 56 ba 15 12 8f 80 1b 4b e4 40 a5 cc a2 a0 0d b7 dc 07 5a 02 14 8d 64 eb b8 16 5d 7c Data Ascii: V%;uKyMd7TvQ+v5l-jl4oEkp%g=Y(m&z&R %G()r2i@ee-e2(-+\K%e^%`:+"9QAheLY2B-uI0`9+SBK()8q>EK{oPVK@Zd]\|
2024-10-23 22:50:47 UTC	1448	IN	Data Raw: d5 cb de 0c d3 4a fc 82 b4 c2 ab 09 66 91 1a 81 aa 0d 5a b4 29 63 20 fa 90 99 0e 8d c3 9c cb 19 93 2b 95 a5 2f 74 ac da ef 4a cc ca cf af 99 51 b8 ca b6 2d 25 a7 88 ee 89 4b b3 6a 7a 08 66 64 a7 a1 61 99 96 af 52 b2 29 00 04 91 ad 95 92 b5 f8 05 35 a6 c4 6a 0a 8f 22 34 9a 0a c4 97 80 46 5b 2a 4b 36 12 d6 94 1a 88 66 bc 35 05 2a 16 94 cc 93 45 4a 49 af 88 4a 2d de c0 91 e0 cb 6c d1 f8 6a 2d 75 62 50 35 6c ce 21 3a 24 91 02 58 a8 34 e3 2c 49 3d c2 0e f1 2d 36 04 43 79 93 e6 4b 5d 61 58 b5 a6 1c 96 c6 99 63 4e 81 28 65 5f cc 5a 51 58 65 b4 d4 a8 ef 65 61 6d b9 68 b6 af a1 51 04 6a 9a 2d a5 35 ab 2d a5 35 a1 2d 66 09 12 92 d4 aa b9 68 89 05 0d 68 a8 9d d0 24 6a 54 6a 2b 52 2d aa 5b 90 b1 f6 14 b1 b9 59 b4 d1 45 4c 89 6c 82 c4 81 6c 95 61 53 bd 48 b1 2c b7 a0 Data Ascii: JfZ)c +/tJQ-%KjzfdaR)5j"4F[K6f5EJIJ-lj-ubP5l!:$X4,I=-6CyK]aXcN(e_ZQXeeamhQj-5-5-fhh$jTj+R-[YELllaSH,
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 30 81 2c d1 d2 31 4b 72 ec 93 83 5b ec 5d 93 41 48 6c 9a 2a b7 b0 d9 63 02 b0 db 16 b3 83 a6 42 6c 9d 61 e1 eb a8 b6 b4 39 3c 35 25 b5 18 9c 9c da 25 b5 38 2c 88 b6 ce ab 21 2d 75 2a 24 b6 a9 65 40 35 f1 2b 33 23 2f c8 b6 94 72 16 d3 54 b0 d9 6d 35 3d df cc b6 93 8a ee b6 16 9a a5 11 69 4b bb 16 94 72 ae 60 56 82 db 9c a7 46 e2 1c f2 cd 8e f1 9d 29 ce 72 0e 4c 53 3b 32 e4 e8 b4 9b b3 9e 8b ab 3b ac fa 92 97 72 9e 84 a2 c0 a5 b1 f6 04 b1 c8 09 f4 0b 4c 38 b2 db 34 f3 7a 44 bf ce 0e d1 d7 ff 00 4a c7 fe f1 9e 9c 7e 21 e1 fc de 18 ff 00 81 a0 eb 41 02 f0 14 d1 a6 ff 00 90 a2 ca 5d 02 5b 49 2f e6 12 da ad 08 aa b5 aa 02 49 95 1a 4b 40 86 be 45 46 91 1b 89 3e 66 5a 34 46 a9 aa 0d 14 d2 39 cc 3a 63 2d 77 9a 98 9c 5d 37 6d 4d b7 66 75 6b 73 e6 5a 5b 66 f5 09 66 Data Ascii: 0,1Kr[]AHlcBla9<5%%8,!-u$e@5+3#/rTm5=iKr`VF)rLS;2;rL84zDJ~!A][I/IK@EF>fZ4F9:c-w]7mMfuksZ[ff
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 6a ec 26 ad 47 07 4d 4b 0e 73 2d ba 4b a1 b7 38 61 e2 73 0b 4e 32 9c a4 fc 09 32 d4 62 75 eb a1 27 25 8e 36 25 3f 89 8d 9d a3 8d 9d 5f c4 96 d6 ab 2b d8 cc e4 ed 8e 07 bb 5b 9c e6 5d a3 17 3c 5a 48 84 b8 4d be 65 18 4b 91 59 b7 68 45 d8 a6 67 27 af 0b 02 26 a9 ce de 9c 1c 3c af 40 3d 0d 5a fe 01 19 71 7f 13 2e d0 cc e0 4b 5a 72 94 28 a9 30 e3 29 72 42 d3 1c 59 ce d2 23 a5 2b d3 42 4c 91 0b 23 e7 b7 53 33 2e 98 e2 5a 4a 8e 72 f4 c0 73 e5 b9 ce 61 d6 32 69 24 d5 a3 34 bb 32 dd 6c fc 8e 90 e5 39 2e f5 c5 9a a6 27 26 e3 8b 7b 9d 31 87 0c f3 74 ef 96 cd 79 1b a7 0d 9b 8e 22 dd 15 89 97 1c 49 bd 79 a6 56 66 5c e4 e4 97 5b 14 44 b1 9f a9 97 48 96 33 2b d1 06 9a 8e 60 cb 0d c9 1a 66 59 ef 39 0b 4a 31 54 ed 6e 56 5d 60 9f c1 95 96 bc b4 08 da c4 79 69 ea fa 92 9a Data Ascii: j&GMKs-K8asN22bu'%6%?_+[]<ZHMeKYhEg'&<@=Zq.KZr(0)rBY#+BL#S3.ZJrsa2i$42l9.'&{1ty"IyVf\[DH3+`fY9J1TnV]`yi
2024-10-23 22:50:48 UTC	16384	IN	Data Raw: 8c 4c ba c6 0d a8 75 25 b7 18 34 f2 55 59 96 f5 67 bc 57 a9 61 cf 26 5e 2a d9 1b b7 3a 19 dd e8 ac 96 ba 30 d4 e7 ca 8b 69 42 38 75 c8 58 eb 15 e0 12 5a 71 16 cc 39 e5 23 6c 62 44 cd ba 43 9b 52 33 6e d1 8a ee a5 f0 25 b5 4d c7 0e 99 16 dd 63 0b d9 18 57 48 e1 cf 96 c6 76 74 88 6a 9d dd 18 9c 9d 23 16 e9 f4 f2 39 cc ba 44 0e ed f3 0a 32 a4 e8 5a 53 12 c3 57 d4 9b 35 a8 58 06 67 37 48 e3 13 83 39 ee ed 1c 6c 47 01 99 9c db 8e 36 a3 c3 52 d8 c4 e6 e9 1c 6e 9d c3 31 3c 8e 9d 6e b8 5c 23 bd 51 ce 79 1b 8e 37 78 f0 e8 e5 39 ba 53 af 74 b3 18 9c 86 d6 13 66 27 22 da ee 89 b2 5b 5d df 81 2d 2d b5 86 19 99 74 58 3e ee c4 b6 36 52 c1 75 a2 35 66 cc 3c 0d b7 0d 6c cf 73 a6 c2 d7 61 dd 7f 22 5a ec b2 19 2d b5 86 44 b6 bb a6 cb 6c ec 72 24 58 94 b6 94 7c 0d 42 5b a4 Data Ascii: Lu%4UYgWa&^*:0iB8uXZq9#lbDCR3n%McWHvtj#9D2ZSW5Xg7H9lG6Rn1<n\#Qy7x9Stf'"[]--tX>6Ru5f<lsa"Z-Dlr$X\|B[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.10	49823	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	589	OUT	GET /wp-content/plugins/mx_pages/neighborhood-news/images/NN_couple_crop-1200x187.jpg HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:47 UTC	460	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:04 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:16 GMT content-length: 22092 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:04 GMT x-content-type-options: nosniff content-type: image/jpeg v-backend: dugout12-pr x-varnish: 245795911 218301300 age: 7303 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:47 UTC	5377	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 bb 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 44 10 00 02 01 03 02 03 05 04 08 05 02 05 03 05 01 00 01 02 00 03 04 11 12 21 05 31 41 06 13 22 51 71 32 33 61 81 07 14 23 91 a1 b1 c1 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("D!1A"Qq23a#
2024-10-23 22:50:47 UTC	8688	IN	Data Raw: 22 c5 f5 9c 9c 66 64 1b 82 57 9c b6 d0 97 7d e7 3e df 05 a6 68 54 f1 0c ca 81 2b 0e a7 47 29 29 ab 47 04 ca 4c aa 32 ef 4e 41 98 77 b7 69 6a a5 ea 10 00 df 73 34 f8 cd d2 db a3 75 61 d3 e3 3c ff 00 8b dd 77 8f de 56 39 45 6c e0 1e 64 75 fb c6 c3 cf 7e 93 ab 0e 0f 51 f2 75 60 f1 b6 5b cf a2 1c 5f 8e 13 53 55 56 38 e6 13 f2 f9 ce 1f 89 5e d4 ba ae 5e a9 cd 47 38 54 53 09 e2 57 4f 53 5b d4 38 df c0 a7 f3 ff 00 3f 59 99 4c 10 4b 3f b6 7e ff 00 49 f4 5e 3e 05 8d 5d 15 96 57 c2 07 b8 3d d8 c1 60 5b 99 f2 13 32 ad 46 a8 75 31 38 3c 81 fc e1 97 6d de 33 28 1e 10 46 af f7 1f 28 0d 50 c4 9e a5 8e 27 64 4e 59 82 b6 f9 23 97 49 4d 71 85 0a 39 08 53 00 3d 16 50 e0 ef 9e 7b 4d 51 ce d0 e5 8a 22 a8 e5 88 d4 df fa 87 33 88 f5 86 ff 00 1c 1f ce 43 1b 36 39 01 98 c9 aa 24 Data Ascii: "fdW}>hT+G))GL2NAwijs4ua<wV9Eldu~Qu`[_SUV8^^G8TSWOS[8?YLK?~I^>]W=`[2Fu18<m3(F(P'dNY#IMq9S=P{MQ"3C69$
2024-10-23 22:50:47 UTC	5792	IN	Data Raw: 6b fe 4e 0b b1 14 55 b8 9f 16 a8 d8 65 fa da a2 b2 f4 60 a4 fe 0b 8f 9c d0 ed 17 da 3d e9 a0 5b 5a 51 64 5c 6d 87 6c 01 f3 c6 a9 4f d1 dd b7 d5 f8 55 b2 87 c5 4f ac 56 af 5f 56 70 18 8c 0c 9f 43 f8 cb 7b 51 77 46 da da ba d6 7c 1c a5 4c a9 c6 72 46 36 f4 7f c2 5b 4d e4 e0 eb 4e a3 6c f2 be 2e c9 5a e3 86 69 27 14 c3 ae a3 d5 51 98 03 f8 09 93 50 84 15 2a 8d bc 07 03 cc 9d bf 49 7e 9d 15 b1 85 f0 59 eb 3b f2 d5 8c 7c f7 10 4b f2 52 d1 31 8d 4e cb 8f 4d e7 d0 e3 8d 24 8f 1f 24 ad b6 1d 6a 4a 70 fb 65 dc 1d 25 cf e2 44 a6 b9 f7 58 18 63 58 fd ca 21 35 02 ad 5a 48 c3 6a 69 92 07 96 df b1 83 50 25 be a0 ad b9 29 a8 ff 00 d4 73 f9 4a fd c9 7f 45 75 89 fb 40 0e 54 3e 91 f1 23 69 5d cb 10 58 ef 9c 01 8f 53 2c 64 d2 d4 d4 1e 5a 9c fc 49 cc 7b 95 0c ee 54 6d b6 3d Data Ascii: kNUe`=[ZQd\mlOUOV_VpC{QwF\|LrF6[MNl.Zi'QP*I~Y;\|KR1NM$$jJpe%DXcX!5ZHjiP%)sJEu@T>#i]XS,dZI{Tm=
2024-10-23 22:50:47 UTC	2235	IN	Data Raw: 2e de 72 77 1c 5d 95 09 cc 97 8c d6 39 2c ed be b9 4c 9c 64 4b a9 d4 47 e4 67 95 37 68 99 6a e3 5f 59 d5 70 0e 2a 6e 34 ef 21 e3 46 8a 47 60 29 83 22 d4 64 ed 9b 52 03 2f c4 cd c1 15 b0 13 50 f8 4a 9a dc 4d 12 b2 0e 00 12 5e 34 3d cc d6 b7 94 bd 03 0d ad 59 17 99 12 91 71 4d 8f 31 27 d2 29 4c 0d a8 91 20 51 84 d3 50 ad ca 39 a2 0c 9f 4d a1 ec 8c af 10 8b 5b 09 a4 d6 e3 ca 54 d6 d0 f7 a0 f6 b0 31 58 89 60 ae 64 da da 40 db 99 4b 2c 90 69 16 4c 57 93 15 84 18 d1 22 47 43 09 6b 3b f9 21 e2 0d ef 01 8e 18 18 12 86 cc 32 85 26 69 a2 cc 99 2f 19 f3 db 9d e4 a9 ae 64 88 19 96 d1 03 22 7e 72 dd 23 ad 72 59 46 dc b4 3e 8d 9f c2 5d 66 a3 6d a6 90 50 17 61 30 77 23 55 15 46 6b 53 14 96 01 5e ae fb 43 f8 81 3b cc 86 dd a3 48 89 13 0c 4c 58 df 78 eb 1c 0d e0 09 04 db Data Ascii: .rw]9,LdKGg7hj_Yp*n4!FG`)"dR/PJM^4=YqM1')L QP9M[T1X`d@K,iLW"GCk;!2&i/d"~r#rYF>]fmPa0w#UFkS^C;HLXx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.10	49825	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	430	OUT	GET /service/v1/auth/javascripts/iframelogin/jquery.iframelogin.min.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:47 UTC	283	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:47 GMT content-type: application/javascript content-length: 40504 server: nginx last-modified: Mon, 15 Jul 2024 18:05:41 GMT etag: "669564f5-9e38" accept-ranges: bytes x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 2f 2a 0a 20 43 6f 6c 6f 72 62 6f 78 20 76 31 2e 34 2e 33 31 20 2d 20 32 30 31 33 2d 30 39 2d 32 35 0a 20 6a 51 75 65 72 79 20 6c 69 67 68 74 62 6f 78 20 61 6e 64 20 6d 6f 64 61 6c 20 77 69 6e 64 6f 77 20 70 6c 75 67 69 6e 0a 20 28 63 29 20 32 30 31 33 20 4a 61 63 6b 20 4d 6f 6f 72 65 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 63 6f 6c 6f 72 62 6f 78 0a 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 71 2c 75 2c 79 2c 58 2c 52 29 7b 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 5b 62 5d 3b 72 Data Ascii: /* Colorbox v1.4.31 - 2013-09-25 jQuery lightbox and modal window plugin (c) 2013 Jack Moore - http://www.jacklmoore.com/colorbox license: http://www.opensource.org/licenses/mit-license.php*/(function(e,q,u,y,X,R){function D(a,b){var d=typeof a[b];r
2024-10-23 22:50:47 UTC	16384	IN	Data Raw: 6f 6d 69 6e 67 28 6d 2e 73 75 62 73 74 72 69 6e 67 28 76 2b 31 29 2c 6c 29 7d 2c 6f 75 74 67 6f 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 6d 2c 6c 2c 76 29 7b 64 2e 64 6f 77 6e 2e 6f 75 74 67 6f 69 6e 67 28 68 2b 22 5f 22 2b 6d 2c 6c 2c 76 29 7d 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 61 2e 69 6e 69 74 69 61 74 65 26 26 62 28 29 7d 7d 7d 3b 74 2e 73 74 61 63 6b 2e 52 70 63 42 65 68 61 76 69 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 0a 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 77 29 7b 77 2e 6a 73 6f 6e 72 70 63 3d 22 32 2e 30 22 3b 6d 2e 64 6f 77 6e 2e 6f 75 74 67 6f 69 6e 67 28 6c 2e 73 74 72 69 6e 67 69 66 79 28 77 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 77 2c 7a 29 7b 76 61 72 20 42 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: oming(m.substring(v+1),l)},outgoing:function(m,l,v){d.down.outgoing(h+"_"+m,l,v)},callback:function(m){a.initiate&&b()}}};t.stack.RpcBehavior=function(a,b){function d(w){w.jsonrpc="2.0";m.down.outgoing(l.stringify(w))}function h(w,z){var B=Array.prototyp
2024-10-23 22:50:47 UTC	7736	IN	Data Raw: 6c 65 6e 67 74 68 3b 64 3c 62 3b 64 2b 2b 29 6f 61 3d 51 5b 64 5d 2c 6f 61 28 61 29 3b 69 66 28 22 6c 6f 67 6f 75 74 5f 73 75 63 63 65 73 73 5f 70 61 74 68 22 3d 3d 3d 67 29 7b 76 61 72 20 68 3d 5b 5d 3b 64 3d 30 3b 66 6f 72 28 62 3d 6a 61 2e 6c 65 6e 67 74 68 3b 64 3c 62 3b 64 2b 2b 29 64 61 3d 6a 61 5b 64 5d 2c 68 2e 70 75 73 68 28 64 61 28 61 29 29 3b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 65 2e 73 6f 63 6b 65 74 28 29 2e 64 65 73 74 72 6f 79 28 29 3b 72 65 74 75 72 6e 20 46 3d 6e 75 6c 6c 7d 7d 28 74 68 69 73 29 7d 3b 65 2e 63 6f 6e 74 61 69 6e 65 72 28 29 2e 73 68 6f 77 28 29 3b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 63 6f 6c 6f 72 62 6f 78 28 72 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: length;d<b;d++)oa=Q[d],oa(a);if("logout_success_path"===g){var h=[];d=0;for(b=ja.length;d<b;d++)da=ja[d],h.push(da(a));return h}});e.socket().destroy();return F=null}}(this)};e.container().show();return jQuery.colorbox(r)};e.prototype.close=function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.10	49819	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	802	OUT	GET /s/player/a62d836d/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:47 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 338546 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 19:28:15 GMT Expires: Thu, 23 Oct 2025 19:28:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 12152 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:47 UTC	690	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d Data Ascii: .length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6d 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: unction la(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ma=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};u("Object.assi
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 77 61 28 29 7b 74 68 69 73 2e 41 3d 21 31 3b 74 68 69 73 2e 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 44 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 4a 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 41 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 41 3d 21 30 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 65 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c Data Ascii: wa(){this.A=!1;this.u=null;this.i=void 0;this.h=1;this.D=this.o=0;this.J=this.j=null}function xa(a){if(a.A)throw new TypeError("Generator is already running");a.A=!0}wa.prototype.H=function(a){this.i=a};function ya(a,b){a.j={exception:b,ed:!0};a.h=a.o\|
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 48 29 3a 28 61 2e 68 2e 48 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 48 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 Data Ascii: his.next=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.H):(a.h.H(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.H):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=f
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 57 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 44 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e Data Ascii: tch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.W),reject:g(this.D)}};b.prototype.W=function
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2e 6a 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 69 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 57 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c Data Ascii: .j;return k(g)};b.prototype.J=function(){if(this.i!=null){for(var g=0;g<this.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ha=function(g){var h=this.o();g.Wb(h.resolve,h.reject)};b.prototype.oa=function(g,h){var k=this.o();try{g.cal
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 68 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 76 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 6c 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b Data Ascii: ction b(k){this.h=(h+=Math.random()+1).toString();if(k){k=v(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!la(k,g)){var l=new c;
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 6c 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e Data Ascii: 0}})}function d(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&la(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 79 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d Data Ascii: y.head=null,this.size--,!0):!1};e.prototype.clear=function(){this[0]={};this[1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.10	49817	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	790	OUT	GET /s/player/a62d836d/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:47 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2466682 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 19:23:25 GMT Expires: Thu, 23 Oct 2025 19:23:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 12442 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:47 UTC	689	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 63 61 2c 4a 64 2c 48 64 2c 74 63 61 2c 73 63 61 2c 75 63 61 2c 76 63 61 2c 4b 64 2c 77 63 61 2c 78 63 61 2c 4d 64 2c 79 63 61 2c 4e 64 2c 41 63 61 2c 50 64 2c 42 63 61 2c 4f 64 2c 53 64 2c 52 64 2c 54 64 2c 57 64 2c 24 64 2c 45 63 61 2c 46 63 61 2c 59 64 2c 47 63 61 2c 48 63 61 2c 61 65 2c 4c 63 61 2c 62 65 2c 66 65 2c 67 65 2c 68 65 2c 63 65 2c 65 65 2c 64 65 2c 6b 65 2c 44 63 61 2c 6c 65 2c 4d 63 61 2c 66 62 2c 6d 65 2c 6e 65 2c 58 64 2c 5a 64 2c 70 65 2c 4f 63 61 2c 71 65 2c 72 65 2c 50 63 61 2c 69 62 2c 73 65 2c 74 65 2c 75 65 2c 76 65 2c 77 65 2c 78 65 2c 79 65 2c 51 63 61 2c 7a 65 2c 52 63 61 2c 41 65 2c 53 63 61 2c 43 65 2c 42 65 2c 44 65 2c 45 65 2c 47 65 2c 48 65 2c 49 65 2c 54 63 61 2c 56 63 61 2c 4b 65 2c 57 63 61 2c 58 63 61 2c 4c 65 2c 4d 65 Data Ascii: ca,Jd,Hd,tca,sca,uca,vca,Kd,wca,xca,Md,yca,Nd,Aca,Pd,Bca,Od,Sd,Rd,Td,Wd,$d,Eca,Fca,Yd,Gca,Hca,ae,Lca,be,fe,ge,he,ce,ee,de,ke,Dca,le,Mca,fb,me,ne,Xd,Zd,pe,Oca,qe,re,Pca,ib,se,te,ue,ve,we,xe,ye,Qca,ze,Rca,Ae,Sca,Ce,Be,De,Ee,Ge,He,Ie,Tca,Vca,Ke,Wca,Xca,Le,Me
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2c 53 67 61 2c 54 67 61 2c 55 67 61 2c 56 67 61 2c 68 6b 2c 69 6b 2c 58 67 61 2c 6a 6b 2c 6b 6b 2c 59 67 61 2c 6c 6b 2c 6d 6b 2c 6e 6b 2c 6f 6b 2c 70 6b 2c 62 68 61 2c 5a 67 61 2c 73 6b 2c 61 68 61 2c 74 6b 2c 24 67 61 2c 72 6b 2c 71 6b 2c 76 6b 2c 64 68 61 2c 78 6b 2c 77 6b 2c 43 6b 2c 44 6b 2c 46 6b 2c 67 68 61 2c 45 6b 2c 49 6b 2c 68 68 61 2c 4a 6b 2c 65 68 61 2c 6b 68 61 2c 6c 68 61 2c 6d 68 61 2c 4f 6b 2c 50 6b 2c 51 6b 2c 6e 68 61 2c 52 6b 2c 53 6b 2c 54 6b 2c 55 6b 2c 6f 68 61 2c 56 6b 2c 57 6b 2c 58 6b 2c 70 68 61 2c 71 68 61 2c 59 6b 2c 72 68 61 2c 4f 6a 2c 75 68 61 2c 76 68 61 2c 77 68 61 2c 78 68 61 2c 73 68 61 2c 5a 6b 2c 24 6b 2c 61 6c 2c 62 6c 2c 7a 68 61 2c 64 6c 2c 63 6c 2c 41 68 61 2c 42 68 61 2c 43 68 61 2c 68 6c 2c 44 68 61 2c 69 6c 2c Data Ascii: ,Sga,Tga,Uga,Vga,hk,ik,Xga,jk,kk,Yga,lk,mk,nk,ok,pk,bha,Zga,sk,aha,tk,$ga,rk,qk,vk,dha,xk,wk,Ck,Dk,Fk,gha,Ek,Ik,hha,Jk,eha,kha,lha,mha,Ok,Pk,Qk,nha,Rk,Sk,Tk,Uk,oha,Vk,Wk,Xk,pha,qha,Yk,rha,Oj,uha,vha,wha,xha,sha,Zk,$k,al,bl,zha,dl,cl,Aha,Bha,Cha,hl,Dha,il,
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 6c 61 2c 53 6f 2c 76 6c 61 2c 77 6c 61 2c 7a 6c 61 2c 42 6c 61 2c 43 6c 61 2c 44 6c 61 2c 48 6c 61 2c 47 6c 61 2c 4a 6c 61 2c 4c 6c 61 2c 65 70 2c 4f 6c 61 2c 50 6c 61 2c 51 6c 61 2c 52 6c 61 2c 54 6c 61 2c 74 70 2c 55 6c 61 2c 73 70 2c 76 70 2c 56 6c 61 2c 77 70 2c 79 70 2c 7a 70 2c 57 6c 61 2c 0a 58 6c 61 2c 59 6c 61 2c 47 70 2c 5a 6c 61 2c 24 6c 61 2c 50 70 2c 61 6d 61 2c 63 6d 61 2c 51 70 2c 64 6d 61 2c 65 6d 61 2c 6b 6d 61 2c 67 6d 61 2c 54 70 2c 55 70 2c 56 70 2c 58 70 2c 59 70 2c 70 6d 61 2c 5a 70 2c 24 70 2c 61 71 2c 72 6d 61 2c 64 71 2c 73 6d 61 2c 74 6d 61 2c 65 71 2c 76 6d 61 2c 67 71 2c 68 71 2c 69 71 2c 6a 71 2c 77 6d 61 2c 6b 71 2c 6d 71 2c 6e 71 2c 6f 71 2c 70 71 2c 78 6d 61 2c 72 71 2c 73 71 2c 74 71 2c 75 71 2c 76 71 2c 77 71 2c 79 6d 61 Data Ascii: la,So,vla,wla,zla,Bla,Cla,Dla,Hla,Gla,Jla,Lla,ep,Ola,Pla,Qla,Rla,Tla,tp,Ula,sp,vp,Vla,wp,yp,zp,Wla,Xla,Yla,Gp,Zla,$la,Pp,ama,cma,Qp,dma,ema,kma,gma,Tp,Up,Vp,Xp,Yp,pma,Zp,$p,aq,rma,dq,sma,tma,eq,vma,gq,hq,iq,jq,wma,kq,mq,nq,oq,pq,xma,rq,sq,tq,uq,vq,wq,yma
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2c 48 76 2c 4b 71 61 2c 4a 71 61 2c 49 76 2c 4c 71 61 2c 4e 71 61 2c 50 71 61 2c 4f 71 61 2c 51 71 61 2c 54 71 61 2c 52 71 61 2c 56 76 2c 55 76 2c 55 71 61 2c 54 76 2c 57 76 2c 58 76 2c 59 76 2c 56 71 61 2c 57 71 61 2c 24 76 2c 59 71 61 2c 63 77 2c 62 77 2c 65 77 2c 66 77 2c 67 77 2c 5a 71 61 2c 68 77 2c 6a 77 2c 24 71 61 2c 6c 77 2c 6e 77 2c 6f 77 2c 61 72 61 2c 62 72 61 2c 63 72 61 2c 70 77 2c 72 77 2c 64 72 61 2c 74 77 2c 75 77 2c 76 77 2c 66 72 61 2c 77 77 2c 67 72 61 2c 79 77 2c 42 77 2c 41 77 2c 7a 77 2c 43 77 2c 44 77 2c 6a 72 61 2c 70 72 61 2c 72 72 61 2c 6f 72 61 2c 6e 72 61 2c 71 72 61 2c 47 77 2c 4a 77 2c 74 72 61 2c 73 72 61 2c 4f 77 2c 50 77 2c 69 72 61 2c 43 72 61 2c 0a 56 77 2c 42 72 61 2c 46 72 61 2c 41 72 61 2c 46 77 2c 57 77 2c 4e 77 2c Data Ascii: ,Hv,Kqa,Jqa,Iv,Lqa,Nqa,Pqa,Oqa,Qqa,Tqa,Rqa,Vv,Uv,Uqa,Tv,Wv,Xv,Yv,Vqa,Wqa,$v,Yqa,cw,bw,ew,fw,gw,Zqa,hw,jw,$qa,lw,nw,ow,ara,bra,cra,pw,rw,dra,tw,uw,vw,fra,ww,gra,yw,Bw,Aw,zw,Cw,Dw,jra,pra,rra,ora,nra,qra,Gw,Jw,tra,sra,Ow,Pw,ira,Cra,Vw,Bra,Fra,Ara,Fw,Ww,Nw,
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 76 61 2c 72 76 61 2c 71 76 61 2c 73 76 61 2c 74 76 61 2c 66 43 2c 76 76 61 2c 75 76 61 2c 67 43 2c 68 43 2c 69 43 2c 77 76 61 2c 6a 43 2c 6b 43 2c 6c 43 2c 79 76 61 2c 7a 76 61 2c 6d 43 2c 78 76 61 2c 6e 43 2c 43 76 61 2c 6f 43 2c 70 43 2c 71 43 2c 72 43 2c 73 43 2c 74 43 2c 75 43 2c 76 43 2c 77 43 2c 78 43 2c 79 43 2c 7a 43 2c 41 43 2c 42 43 2c 43 43 2c 44 43 2c 45 43 2c 46 43 2c 47 43 2c 48 43 2c 49 43 2c 4a 43 2c 4b 43 2c 4c 43 2c 4d 43 2c 4e 43 2c 4f 43 2c 50 43 2c 51 43 2c 52 43 2c 53 43 2c 54 43 2c 55 43 2c 56 43 2c 57 43 2c 58 43 2c 59 43 2c 5a 43 2c 24 43 2c 61 44 2c 62 44 2c 63 44 2c 64 44 2c 65 44 2c 66 44 2c 67 44 2c 68 44 2c 69 44 2c 6a 44 2c 6b 44 2c 6c 44 2c 6d 44 2c 6e 44 2c 6f 44 2c 70 44 2c 71 44 2c 72 44 2c 73 44 2c 74 44 2c 75 44 2c 76 Data Ascii: va,rva,qva,sva,tva,fC,vva,uva,gC,hC,iC,wva,jC,kC,lC,yva,zva,mC,xva,nC,Cva,oC,pC,qC,rC,sC,tC,uC,vC,wC,xC,yC,zC,AC,BC,CC,DC,EC,FC,GC,HC,IC,JC,KC,LC,MC,NC,OC,PC,QC,RC,SC,TC,UC,VC,WC,XC,YC,ZC,$C,aD,bD,cD,dD,eD,fD,gD,hD,iD,jD,kD,lD,mD,nD,oD,pD,qD,rD,sD,tD,uD,v
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 79 61 2c 44 49 2c 74 79 61 2c 75 79 61 2c 45 49 2c 76 79 61 2c 77 79 61 2c 78 79 61 2c 79 79 61 2c 46 49 2c 7a 79 61 2c 47 49 2c 42 79 61 2c 49 49 2c 4a 49 2c 44 79 61 2c 43 79 61 2c 45 79 61 2c 46 79 61 2c 47 79 61 2c 4c 49 2c 4d 49 2c 4e 49 2c 48 79 61 2c 49 79 61 2c 4a 79 61 2c 4b 79 61 2c 4c 79 61 2c 4d 79 61 2c 4e 79 61 2c 4f 79 61 2c 50 79 61 2c 51 79 61 2c 50 49 2c 51 49 2c 52 79 61 2c 53 79 61 2c 52 49 2c 53 49 2c 54 79 61 2c 54 49 2c 55 49 2c 57 49 2c 55 79 61 2c 58 49 2c 59 49 2c 5a 49 2c 56 79 61 2c 24 49 2c 57 79 61 2c 61 4a 2c 58 79 61 2c 62 4a 2c 59 79 61 2c 5a 79 61 2c 63 4a 2c 24 79 61 2c 61 7a 61 2c 62 7a 61 2c 64 4a 2c 65 4a 2c 66 4a 2c 67 4a 2c 68 4a 2c 63 7a 61 2c 64 7a 61 2c 69 4a 2c 6a 4a 2c 6b 4a 2c 65 7a 61 2c 6c 4a 2c 6d 4a 2c 6e Data Ascii: ya,DI,tya,uya,EI,vya,wya,xya,yya,FI,zya,GI,Bya,II,JI,Dya,Cya,Eya,Fya,Gya,LI,MI,NI,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,Pya,Qya,PI,QI,Rya,Sya,RI,SI,Tya,TI,UI,WI,Uya,XI,YI,ZI,Vya,$I,Wya,aJ,Xya,bJ,Yya,Zya,cJ,$ya,aza,bza,dJ,eJ,fJ,gJ,hJ,cza,dza,iJ,jJ,kJ,eza,lJ,mJ,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.10	49822	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	584	OUT	GET /wp-content/plugins/mx_pages/neighborhood-news/images/NN_devices-238x160.png HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:47 UTC	459	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:04 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:18 GMT content-length: 11146 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:04 GMT x-content-type-options: nosniff content-type: image/png v-backend: dugout13-pr x-varnish: 252150195 218301304 age: 7303 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:47 UTC	2482	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ee 00 00 00 a0 08 03 00 00 00 3c 62 a0 0c 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 37 50 4c 54 45 00 00 00 0f 0f 0f 00 00 00 00 00 00 d5 d5 d6 02 03 03 e0 e1 e2 16 16 16 01 01 01 14 14 14 a3 aa ac 00 00 00 04 04 04 01 01 01 bf c5 c7 c3 c9 cc be c3 c5 31 31 31 c0 c5 c7 c3 c8 cb c2 c7 ca c3 c8 cb 10 10 10 c3 c8 cb 20 20 20 c3 c7 ca 1b 19 19 70 70 71 ea ea ec a7 ac 95 38 38 38 ff ff ff 00 00 00 dd de df d2 cf c7 be c3 c6 e8 e6 e1 ea e9 e4 e8 e4 da 3a 79 b8 e7 e2 d9 de dc d6 e8 e4 dc d1 ce c6 e9 e5 dc d9 d6 cf d4 d2 ca dc da d3 e5 e1 d7 e6 e1 d8 e0 de d9 e4 e2 dc f6 f6 f4 f9 f8 f7 db d9 d2 e7 e2 db fe ff ff f2 f1 ee d7 d4 cc e5 e3 de ed ea e6 e4 e0 Data Ascii: PNGIHDR<bgAMAasRGB7PLTE111 ppq888:y
2024-10-23 22:50:47 UTC	8664	IN	Data Raw: c0 f5 82 25 a3 f0 ef 68 8d 19 6f 45 4b b9 d9 28 75 1f eb 94 dc 79 71 21 14 91 58 13 6b 12 45 c6 94 62 59 51 7f 64 ac a3 2f 16 d7 a8 28 d0 46 79 ec ae 3c 12 8b 0c 0f 7a 43 cb 8c 62 8b 2f b2 0e a3 85 02 eb 65 94 69 a3 c1 00 a6 39 2e 02 ae 05 da 2a 9a 6e 47 28 12 88 38 bf fa 2a d4 de 7e e3 c6 0d 33 5c a6 0d 1e f8 89 dc f8 70 b9 b6 67 ae 57 70 88 cb 68 b9 c8 d3 62 c6 34 8a cb 08 93 75 fc b4 98 8a 4b 11 3e a4 a0 55 1a a1 2d f3 32 7c 52 b0 c5 3c 43 a8 89 17 72 70 71 49 46 a3 45 a3 e9 02 bd 03 87 40 13 5c 41 a6 c1 54 c9 b2 c1 12 08 44 ae fc ed ab 48 0f e2 5a f0 46 a1 76 b1 ef 6a 3a 6e 01 27 ad 32 d8 98 f5 d5 f5 b9 65 d6 53 50 a2 a5 89 ab 48 5c 1e bd 06 e8 57 01 1c 59 c6 06 4a 1c 11 7c 6c a9 2a 2e 19 d1 07 d3 9a 60 f0 21 53 46 d6 4c 0d 07 2c 60 b4 c6 2f 26 68 23 Data Ascii: %hoEK(uyq!XkEbYQd/(Fy<zCb/ei9.nG(8~3\pgWphb4uK>U-2\|R<CrpqIFE@\ATDHZFvj:n'2eSPH\WYJ\|l*.`!SFL,`/&h#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.10	49818	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:47 UTC	791	OUT	GET /s/player/a62d836d/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:47 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 66550 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 19:39:55 GMT Expires: Thu, 23 Oct 2025 19:39:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 11452 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:47 UTC	691	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 4b 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 61 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 61 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 64 52 28 61 29 7d 2c 4c 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 5a 6f 28 61 29 3b 0a 66 6f 72 28 76 61 72 20 62 3d 30 Data Ascii: (function(g){var window=this;/* Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause*/'use strict';var Kib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.dR(a)},Lib=function(a){g.Zo(a);for(var b=0
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 3d 6e 75 6c 6c 3b 0a 74 68 69 73 2e 42 3d 61 3b 74 68 69 73 2e 6b 65 79 3d 62 3b 74 68 69 73 2e 74 65 78 74 3d 76 6f 69 64 20 30 7d 2c 50 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 6e 65 77 20 4f 69 62 28 62 2c 63 29 3b 0a 72 65 74 75 72 6e 20 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 3d 62 7d 2c 73 34 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 29 72 65 74 75 72 6e 20 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 3b 0a 76 61 72 20 63 3d 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 3f 61 2e 6c 6f 63 61 6c 4e 61 6d 65 3a 61 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 3f 61 2e 67 65 74 41 Data Ascii: =null;this.B=a;this.key=b;this.text=void 0},Pib=function(a,b,c){b=new Oib(b,c);return a.__incrementalDOMData=b},s4=function(a,b){if(a.__incrementalDOMData)return a.__incrementalDOMData;var c=a.nodeType===1?a.localName:a.nodeName,d=a.nodeType===1?a.getA
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3b 64 2b 3d 31 29 63 3d 28 30 2c 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 28 63 29 3b 62 2e 64 61 74 61 21 3d 3d 63 26 26 28 62 2e 64 61 74 61 3d 63 29 7d 7d 2c 55 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 67 2e 56 62 62 29 3b 0a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 67 2e 56 62 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 67 2e 71 70 5b 62 5d 21 3d 3d 76 6f 69 64 20 30 26 26 28 61 5b 62 5d 3d 67 2e 71 70 5b 62 5d 29 7d 29 3b 0a 72 65 74 75 72 6e 20 61 7d 2c 56 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 49 3a 22 73 76 67 22 2c 0a 58 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c Data Ascii: s.length;d+=1)c=(0,arguments[d])(c);b.data!==c&&(b.data=c)}},Uib=function(){var a=Object.assign({},g.Vbb);Object.getOwnPropertyNames(g.Vbb).forEach(function(b){g.qp[b]!==void 0&&(a[b]=g.qp[b])});return a},Vib=function(){return{I:"svg",X:{height:"100%",
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2e 32 38 20 7a 20 6d 20 38 39 2e 34 30 2c 2e 30 39 20 63 20 2d 31 2e 37 2c 30 20 2d 32 2e 38 39 2c 2e 35 39 20 2d 33 2e 35 39 2c 31 2e 35 39 20 2d 30 2e 36 39 2c 2e 39 39 20 2d 30 2e 39 39 2c 32 2e 36 30 20 2d 30 2e 39 39 2c 34 2e 39 30 20 6c 20 30 2c 32 2e 35 39 20 63 20 30 2c 32 2e 32 20 2e 33 30 2c 33 2e 39 30 20 2e 39 39 2c 34 2e 39 30 20 2e 37 2c 31 2e 31 20 31 2e 38 2c 31 2e 35 39 20 33 2e 35 2c 31 2e 35 39 20 31 2e 34 2c 30 20 32 2e 33 38 2c 2d 30 2e 33 20 33 2e 31 38 2c 2d 31 20 2e 37 2c 2d 30 2e 37 20 31 2e 30 39 2c 2d 31 2e 36 39 20 31 2e 30 39 2c 2d 33 2e 30 39 20 6c 20 30 2c 2d 30 2e 35 20 2d 32 2e 39 30 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 Data Ascii: .28 z m 89.40,.09 c -1.7,0 -2.89,.59 -3.59,1.59 -0.69,.99 -0.99,2.60 -0.99,4.90 l 0,2.59 c 0,2.2 .30,3.90 .99,4.90 .7,1.1 1.8,1.59 3.5,1.59 1.4,0 2.38,-0.3 3.18,-1 .7,-0.7 1.09,-1.69 1.09,-3.09 l 0,-0.5 -2.90,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 39 20 2e 35 2c 2e 37 20 31 2e 31 38 2c 31 20 32 2e 31 38 2c 31 20 31 2e 33 39 2c 30 20 32 2e 35 31 2c 2d 30 2e 36 39 20 33 2e 32 31 2c 2d 32 2e 30 39 20 6c 20 2e 30 39 2c 30 20 2e 32 38 2c 31 2e 37 38 20 32 2e 36 32 2c 30 20 30 2c 2d 31 34 2e 39 39 20 63 20 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e Data Ascii: 9 .5,.7 1.18,1 2.18,1 1.39,0 2.51,-0.69 3.21,-2.09 l .09,0 .28,1.78 2.62,0 0,-14.99 c 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 36 39 20 34 31 2e 33 39 48 31 30 31 2e 34 33 56 31 37 2e 37 33 48 39 36 2e 34 37 56 33 36 2e 36 31 43 39 35 2e 39 31 20 33 37 2e 36 37 20 39 34 2e 38 31 20 33 38 2e 32 39 20 39 33 2e 37 33 20 33 38 2e 32 39 43 39 32 2e 33 33 20 33 38 2e 32 39 20 39 31 2e 38 39 20 33 37 2e 31 37 20 39 31 2e 38 39 20 33 35 2e 31 33 56 31 37 2e 37 33 48 38 36 2e 39 33 56 33 35 2e 34 33 43 38 36 2e 39 33 20 33 39 2e 34 39 20 38 38 2e 31 39 20 34 31 2e 37 33 20 39 31 2e 34 35 20 34 31 2e 37 33 5a 22 2c 0a 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 49 3a 22 70 61 74 68 22 2c 58 3a 7b 64 3a 22 4d 31 31 30 2e 37 39 20 34 31 2e 38 39 43 31 31 35 2e 31 35 20 34 31 2e 38 39 20 31 31 37 2e 37 35 20 33 39 2e 38 33 20 31 31 37 2e 37 35 20 33 35 2e 36 35 43 31 31 37 2e 37 35 20 33 Data Ascii: 69 41.39H101.43V17.73H96.47V36.61C95.91 37.67 94.81 38.29 93.73 38.29C92.33 38.29 91.89 37.17 91.89 35.13V17.73H86.93V35.43C86.93 39.49 88.19 41.73 91.45 41.73Z",fill:"white"}},{I:"path",X:{d:"M110.79 41.89C115.15 41.89 117.75 39.83 117.75 35.65C117.75 3
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 2e 34 37 20 31 32 39 2e 32 33 20 34 31 2e 37 39 20 31 33 34 2e 39 35 20 34 31 2e 37 39 5a 22 2c 0a 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 49 3a 22 70 61 74 68 22 2c 58 3a 7b 22 63 6c 69 70 2d 72 75 6c 65 22 3a 22 65 76 65 6e 6f 64 64 22 2c 64 3a 22 4d 32 34 2e 39 39 20 34 39 43 32 39 2e 37 34 20 34 39 2e 30 30 20 33 34 2e 33 38 20 34 37 2e 35 39 20 33 38 2e 33 32 20 34 34 2e 39 35 43 34 32 2e 32 37 20 34 32 2e 33 32 20 34 35 2e 33 35 20 33 38 2e 35 37 20 34 37 2e 31 37 20 33 34 2e 31 38 43 34 38 2e 39 38 20 32 39 2e 38 30 20 34 39 2e 34 36 20 32 34 2e 39 37 20 34 38 2e 35 33 20 32 30 2e 33 32 43 34 37 2e 36 31 20 31 35 2e 36 36 20 34 35 2e 33 32 20 31 31 2e 33 38 20 34 31 2e 39 37 20 38 2e 30 33 43 33 38 2e 36 31 20 34 2e 36 37 20 33 34 2e 33 33 Data Ascii: .47 129.23 41.79 134.95 41.79Z",fill:"white"}},{I:"path",X:{"clip-rule":"evenodd",d:"M24.99 49C29.74 49.00 34.38 47.59 38.32 44.95C42.27 42.32 45.35 38.57 47.17 34.18C48.98 29.80 49.46 24.97 48.53 20.32C47.61 15.66 45.32 11.38 41.97 8.03C38.61 4.67 34.33
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 65 6e 6f 64 64 22 7d 7d 5d 7d 7d 2c 76 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 75 34 3b 0a 75 34 3d 61 3b 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 5b 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 34 3d 62 7d 2c 61 7d 2c 59 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 58 69 62 2e 61 64 64 28 61 29 3b 0a 66 6f 72 28 76 61 72 20 62 3d 67 2e 77 28 61 29 2c 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 64 3d 63 2e 76 61 6c 75 65 3b 66 6f 72 28 63 3d 5b 64 5d 3b 64 2e 70 61 72 65 6e 74 21 3d 3d 76 6f 69 64 20 30 3b 29 64 3d 64 2e 70 61 72 65 6e 74 2c 61 2e 68 61 73 28 64 29 26 26 63 2e 70 75 73 68 28 64 29 3b 66 6f 72 28 3b 63 2e 6c 65 6e 67 74 68 Data Ascii: enodd"}}]}},v4=function(a){var b=u4;u4=a;a={};return a[Symbol.dispose]=function(){u4=b},a},Yib=function(a){Xib.add(a);for(var b=g.w(a),c=b.next();!c.done;c=b.next()){var d=c.value;for(c=[d];d.parent!==void 0;)d=d.parent,a.has(d)&&c.push(d);for(;c.length
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 6f 6e 28 61 29 7b 76 61 72 20 62 3d 75 34 3b 0a 62 26 26 21 62 2e 49 61 26 26 28 41 34 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 66 6a 62 28 61 29 7d 29 2c 61 2e 70 61 72 65 6e 74 3d 62 29 7d 2c 69 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 70 46 29 7b 76 61 72 20 62 3d 7b 73 74 61 63 6b 3a 5b 5d 2c 0a 65 72 72 6f 72 3a 76 6f 69 64 20 30 2c 68 61 73 45 72 72 6f 72 3a 21 31 7d 3b 74 72 79 7b 67 2e 63 62 28 62 2c 71 34 28 68 6a 62 29 29 3b 66 6f 72 28 76 61 72 20 63 3d 67 2e 77 28 61 2e 70 46 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 28 29 7d 7d 63 61 74 63 68 28 66 29 7b 62 2e 65 72 72 6f 72 3d 66 2c 62 2e 68 Data Ascii: on(a){var b=u4;b&&!b.Ia&&(A4(function(){return void fjb(a)}),a.parent=b)},ijb=function(a){if(a.pF){var b={stack:[],error:void 0,hasError:!1};try{g.cb(b,q4(hjb));for(var c=g.w(a.pF),d=c.next();!d.done;d=c.next()){var e=d.value;e()}}catch(f){b.error=f,b.h
2024-10-23 22:50:47 UTC	1378	IN	Data Raw: 72 3a 21 31 7d 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 2e 63 62 28 62 2c 71 34 28 6e 75 6c 6c 29 29 2c 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 2e 65 72 72 6f 72 3d 63 2c 62 2e 68 61 73 45 72 72 6f 72 3d 21 30 7d 66 69 6e 61 6c 6c 79 7b 67 2e 65 62 28 62 29 7d 7d 2c 72 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 70 6a 62 2c 61 29 26 26 28 61 3d 70 6a 62 5b 61 5d 2c 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 26 26 28 61 3d 61 5b 62 5d 2c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 29 7b 66 6f 72 28 76 61 72 20 64 3d 6e 75 6c 6c 2c 65 3d 21 31 2c 66 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b Data Ascii: r:!1};try{return g.cb(b,q4(null)),a()}catch(c){b.error=c,b.hasError=!0}finally{g.eb(b)}},rjb=function(a,b,c){if(Object.hasOwnProperty.call(pjb,a)&&(a=pjb[a],Object.hasOwnProperty.call(a,b)&&(a=a[b],a instanceof Array))){for(var d=null,e=!1,f=0,h=a.length;

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.10	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:48 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:48 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225048Z-15b8d89586fcvr6p5956n5d0rc00000003z0000000004yzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:48 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.10	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:48 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:48 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7844842a-001e-0034-8015-25dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225048Z-r197bdfb6b4rkc6mhwyt3e61pc00000000vg000000005th6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:48 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.10	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:48 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225048Z-16849878b785jsrm4477mv3ezn00000006v00000000084rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.10	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:48 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225048Z-15b8d89586fsx9lfqmgrbzpgmg0000000dq0000000000s4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.10	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:48 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:48 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225048Z-16849878b78s2lqfdex4tmpp7800000006z0000000001qt0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:48 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.10	49836	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	770	OUT	GET /service/v1/profile/mls?callback=jQuery3710923492156920481_1729723842516&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842517 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	800	IN	HTTP/1.1 200 OK server: nginx date: Wed, 23 Oct 2024 22:50:49 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-headers: FROM_APP, FROM-APP etag: W/"cea2d3cca3f2f08a97186c2f438d3e24" cache-control: max-age=0, private, must-revalidate x-request-id: a84995ed-d464-401a-869e-05a4f618ad51 x-runtime: 0.244665 x-app-server: wms_svc_profile/svc23-pr connection: close
2024-10-23 22:50:49 UTC	2132	IN	Data Raw: 38 34 44 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 31 36 28 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 72 65 73 75 6c 74 5f 67 65 6f 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 5f 74 79 70 65 22 3a 22 4d 6c 73 44 54 4f 22 2c 22 77 6d 73 5f 73 76 63 5f 63 6f 6d 6d 6f 6e 5f 76 65 72 73 69 6f 6e 22 3a 22 32 2e 31 31 2e 31 31 22 2c 22 72 65 71 75 65 73 74 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 76 63 2e 6d 6f 78 69 77 6f 72 6b 73 2e 63 6f 6d 2f 73 65 72 76 69 63 65 2f 76 31 2f 70 72 6f 66 69 6c 65 2f 6d 6c 73 3f 63 61 6c 6c 62 61 63 6b 3d 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 Data Ascii: 84D/**/jQuery3710923492156920481_1729723842516({"status":"success","data":{"result_geo":null,"result_type":"MlsDTO","wms_svc_common_version":"2.11.11","request_uri":"https://svc.moxiworks.com/service/v1/profile/mls?callback=jQuery3710923492156920481_172
2024-10-23 22:50:49 UTC	2903	IN	Data Raw: 42 35 30 0d 0a 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 41 62 65 72 64 65 65 6e 20 4d 4c 53 20 49 44 58 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 64 65 65 6d 65 64 20 72 65 6c 69 61 62 6c 65 2c 20 62 75 74 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 64 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 69 6e 67 20 70 72 6f 76 69 64 65 64 20 69 73 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 e2 80 99 20 70 65 72 73 6f 6e 61 6c 2c 20 6e 6f 6e 2d 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 20 6f 74 68 65 72 Data Ascii: B50:"","disclaimer":"Copyright 2024 Aberdeen MLS IDX. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for consumers personal, non-commercial use and may not be used for any purpose other
2024-10-23 22:50:49 UTC	8688	IN	Data Raw: 32 31 45 38 0d 0a 20 49 44 58 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 64 65 65 6d 65 64 20 72 65 6c 69 61 62 6c 65 2c 20 62 75 74 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 64 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 69 6e 67 20 70 72 6f 76 69 64 65 64 20 69 73 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 e2 80 99 20 70 65 72 73 6f 6e 61 6c 2c 20 6e 6f 6e 2d 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 20 6f 74 68 65 72 20 74 68 61 6e 20 74 6f 20 69 64 65 6e 74 69 66 79 20 70 72 6f 73 70 65 63 74 69 76 65 20 70 72 6f 70 65 72 74 69 65 73 20 63 6f 6e Data Ascii: 21E8 IDX. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for consumers personal, non-commercial use and may not be used for any purpose other than to identify prospective properties con
2024-10-23 22:50:49 UTC	5792	IN	Data Raw: 31 36 39 38 0d 0a 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 41 41 41 22 2c 22 6d 6c 73 69 64 22 3a 31 31 36 2c 22 6d 6c 73 5f 61 67 65 6e 74 69 64 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 41 4c 42 45 4d 41 52 4c 45 20 41 52 45 41 20 41 53 53 4f 43 2e 20 4f 46 20 52 45 41 4c 54 4f 52 53 22 2c 22 64 61 74 61 5f 61 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 6c 6f 67 6f 5f 73 6d 61 6c 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 5f 6c 61 72 67 65 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 5f 75 72 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 5f 6d 65 64 69 75 6d 22 3a 6e 75 6c 6c 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 64 69 73 Data Ascii: 1698abbreviation":"AAA","mlsid":116,"mls_agentid":null,"name_display":"ALBEMARLE AREA ASSOC. OF REALTORS","data_available":false,"extra_disclaimer":"","disclaimer":"","logo_small":null,"logo_large":null,"link_url":null,"logo_medium":null,"short_name_dis
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 35 34 43 30 0d 0a 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 41 4c 54 41 4d 41 48 41 22 2c 22 64 61 74 61 5f 61 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 6c 6f 67 6f 5f 73 6d 61 6c 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 5f 6c 61 72 67 65 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 5f 75 72 6c 22 3a 22 22 2c 22 6c 6f 67 6f 5f 6d 65 64 69 75 6d 22 3a 6e 75 6c 6c 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 41 4c 54 41 4d 41 48 41 22 2c 22 70 75 62 6c 69 63 5f 73 6f 6c 64 73 5f 79 65 61 72 73 5f 62 61 63 6b 22 3a 31 2c 22 63 6f 72 70 6f 72 61 74 65 5f 73 69 74 65 5f 64 69 73 70 6c 61 79 22 3a 74 72 Data Ascii: 54C0:null,"name_display":"ALTAMAHA","data_available":false,"extra_disclaimer":"","disclaimer":"","logo_small":null,"logo_large":null,"link_url":"","logo_medium":null,"short_name_display":"ALTAMAHA","public_solds_years_back":1,"corporate_site_display":tr
2024-10-23 22:50:49 UTC	5320	IN	Data Raw: 22 3a 74 72 75 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 41 73 68 6c 61 6e 64 20 4f 48 20 4d 4c 53 20 49 44 58 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 64 65 65 6d 65 64 20 72 65 6c 69 61 62 6c 65 2c 20 62 75 74 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 64 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 69 6e 67 20 70 72 6f 76 69 64 65 64 20 69 73 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 e2 80 99 20 70 65 72 73 6f 6e 61 6c 2c 20 6e 6f 6e 2d 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 75 73 65 64 Data Ascii: ":true,"extra_disclaimer":"","disclaimer":"Copyright 2024 Ashland OH MLS IDX. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for consumers personal, non-commercial use and may not be used
2024-10-23 22:50:49 UTC	1455	IN	Data Raw: 35 41 38 0d 0a 65 22 3a 74 72 75 65 2c 22 61 6c 6c 6f 77 5f 73 75 62 64 69 76 69 73 69 6f 6e 5f 73 65 61 72 63 68 22 3a 74 72 75 65 2c 22 6c 6f 61 64 5f 6d 6c 73 5f 72 65 63 72 75 69 74 69 6e 67 5f 64 61 74 61 22 3a 74 72 75 65 7d 7d 2c 7b 22 64 6f 6d 5f 61 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 64 61 79 73 5f 6f 6e 5f 6d 61 72 6b 65 74 5f 6c 61 62 65 6c 22 3a 22 44 61 79 73 20 6f 6e 20 4d 61 72 6b 65 74 22 2c 22 6e 61 6d 65 22 3a 22 41 54 48 45 4e 53 20 43 4f 55 4e 54 59 20 4d 4c 53 22 2c 22 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 41 43 54 22 2c 22 6d 6c 73 69 64 22 3a 35 39 39 2c 22 6d 6c 73 5f 61 67 65 6e 74 69 64 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 41 54 48 45 4e 53 20 43 4f 55 4e 54 59 20 4d 4c 53 22 Data Ascii: 5A8e":true,"allow_subdivision_search":true,"load_mls_recruiting_data":true}},{"dom_available":false,"days_on_market_label":"Days on Market","name":"ATHENS COUNTY MLS","abbreviation":"ACT","mlsid":599,"mls_agentid":null,"name_display":"ATHENS COUNTY MLS"
2024-10-23 22:50:49 UTC	4344	IN	Data Raw: 31 30 46 30 0d 0a 65 61 6c 74 6f 72 73 22 2c 22 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 41 42 52 22 2c 22 6d 6c 73 69 64 22 3a 36 38 2c 22 6d 6c 73 5f 61 67 65 6e 74 69 64 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 41 75 73 74 69 6e 20 42 6f 61 72 64 20 6f 66 20 52 65 61 6c 74 6f 72 73 22 2c 22 64 61 74 61 5f 61 76 61 69 6c 61 62 6c 65 22 3a 74 72 75 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 41 75 73 74 69 6e 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 6f 66 20 52 65 61 6c 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 64 Data Ascii: 10F0ealtors","abbreviation":"ABR","mlsid":68,"mls_agentid":null,"name_display":"Austin Board of Realtors","data_available":true,"extra_disclaimer":"","disclaimer":"Copyright 2024 Austin Association of Realtors. All rights reserved. This information is d
2024-10-23 22:50:49 UTC	5792	IN	Data Raw: 31 36 39 38 0d 0a 5f 64 69 73 70 6c 61 79 22 3a 22 42 41 4b 45 52 53 46 49 45 4c 44 22 2c 22 64 61 74 61 5f 61 76 61 69 6c 61 62 6c 65 22 3a 74 72 75 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 42 61 6b 65 72 73 66 69 65 6c 64 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 6f 66 20 52 65 61 6c 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 64 65 65 6d 65 64 20 72 65 6c 69 61 62 6c 65 2c 20 62 75 74 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 64 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 69 6e 67 20 70 72 6f 76 69 64 65 64 20 69 73 20 66 6f 72 Data Ascii: 1698_display":"BAKERSFIELD","data_available":true,"extra_disclaimer":"","disclaimer":"Copyright 2024 Bakersfield Association of Realtors. All rights reserved. This information is deemed reliable, but not guaranteed. The information being provided is for
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 35 41 38 0d 0a 6e 75 6c 6c 2c 22 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 42 41 54 45 53 56 49 4c 4c 45 20 2d 20 43 52 59 45 2d 4c 45 49 4b 45 22 2c 22 64 61 74 61 5f 61 76 61 69 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 65 78 74 72 61 5f 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 64 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 6c 6f 67 6f 5f 73 6d 61 6c 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 67 6f 5f 6c 61 72 67 65 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 5f 75 72 6c 22 3a 22 22 2c 22 6c 6f 67 6f 5f 6d 65 64 69 75 6d 22 3a 6e 75 6c 6c 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 5f 64 69 73 70 6c 61 79 22 3a 22 42 41 54 45 53 56 49 4c 4c 45 20 2d 20 43 52 59 45 2d 4c 45 49 4b 45 22 2c 22 70 75 62 6c 69 63 5f 73 6f 6c 64 73 5f 79 65 61 72 73 5f 62 61 63 6b 22 3a 33 Data Ascii: 5A8null,"name_display":"BATESVILLE - CRYE-LEIKE","data_available":false,"extra_disclaimer":"","disclaimer":"","logo_small":null,"logo_large":null,"link_url":"","logo_medium":null,"short_name_display":"BATESVILLE - CRYE-LEIKE","public_solds_years_back":3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.10	49838	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	792	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842518&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842519 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:49 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"1b7519d802cbedb0d2b150e890688bd2" cache-control: max-age=0, private, must-revalidate x-request-id: 64bd2d55-3288-49e8-9560-18450eaa0825 x-runtime: 0.010545 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:49 UTC	111	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 31 38 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842518({"success":false,"error":"No authorization header provided"})
2024-10-23 22:50:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.10	49839	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	1132	OUT	GET /services/get-widget/?currency=USD&partialName=%20Featured%20Properties&class=featuredproperties&folder=featuredproperties&admin=0&options%5Bimagewidth%5D=437&options%5Bimageheight%5D=292&options%5Bshowarrows%5D=always&options%5Bcolumns%5D=2&options%5Brows%5D=2&options%5Bhidebuffer%5D=10&options%5Basync%5D=true&status=partial&name=0&data%5Btitle%5D=Featured%20Properties&data%5Blist%5D=894439&data%5Bnumblocks%5D=20 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:49 UTC	689	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:41:55 GMT server: Apache expires: Wed, 23 Oct 2024 22:46:55 GMT content-security-policy: upgrade-insecure-requests strict-transport-security: max-age=31536000 link: <https://kristalittle.com/wp-json/>; rel="https://api.w.org/" last-modified: Wed, 23 Oct 2024 22:07:14 GMT x-renderedpage: true vary: Accept-Encoding x-content-type-options: nosniff content-type: text/html;charset=UTF-8 v-backend: dugout12-pr x-varnish: 651657358 643570466 age: 533 via: 1.1 varnish (Varnish/6.5) cache-control: private, max-age=0 accept-ranges: bytes content-length: 278092 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:49 UTC	2252	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 61 74 75 72 65 64 50 72 6f 70 65 72 74 69 65 73 22 3e 0a 3c 68 33 3e 46 65 61 74 75 72 65 64 20 50 72 6f 70 65 72 74 69 65 73 3c 2f 68 33 3e 0a 3c 64 69 76 20 69 64 3d 22 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 2d 30 2d 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 22 20 64 61 74 61 2d 72 6f 77 73 3d 22 32 22 20 64 61 74 61 2d 63 6f 6c 73 3d 22 32 22 20 64 61 74 61 2d 6c 69 6d 69 74 3d 22 32 30 22 20 63 6c 61 73 73 3d 22 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 20 72 65 73 70 6f 6e 73 69 76 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 72 62 6c 6f 63 6b 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 73 6c 69 64 65 72 62 6c 6f 63 6b 20 66 65 61 74 75 72 65 Data Ascii: <div class="featuredProperties"><h3>Featured Properties</h3><div id="featuredproperties-0-featuredproperties" data-rows="2" data-cols="2" data-limit="20" class="featuredproperties responsive"><div class="sliderblocks"><div class="flexsliderblock feature
2024-10-23 22:50:49 UTC	11584	IN	Data Raw: 26 71 75 6f 74 3b 30 32 5c 2f 31 35 5c 2f 32 30 32 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 6f 70 65 72 74 79 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 52 65 73 69 64 65 6e 74 69 61 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 6f 70 65 72 74 79 5f 74 79 70 65 5f 69 64 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 6c 69 73 74 69 6e 67 5f 6f 66 66 69 63 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 74 79 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 79 65 61 72 5f 62 75 69 6c 64 26 71 75 6f 74 3b 3a 32 30 30 36 2c 26 71 75 6f 74 3b 63 72 65 61 74 65 64 5f 64 61 74 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 30 32 5c 2f 31 36 5c 2f 32 30 32 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6c 69 73 Data Ascii: "02\/15\/2024","property_type":"Residential","property_type_id":1,"listing_office":"Coldwell Banker Realty","year_build":2006,"created_date":"02\/16\/2024","lis
2024-10-23 22:50:49 UTC	2896	IN	Data Raw: 36 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 31 39 31 34 65 33 33 61 2d 30 61 64 64 2d 34 38 36 32 2d 62 35 35 39 2d 35 38 64 63 33 32 32 65 39 61 32 62 5c 2f 30 5f 32 5f 73 6d 61 6c 6c 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 72 61 77 5f 75 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 31 36 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 31 39 31 34 65 33 33 61 2d 30 61 64 64 2d 34 38 36 32 2d 62 35 35 39 2d 35 38 64 63 33 32 32 65 39 61 32 62 5c 2f 30 5f 32 5f 72 61 77 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 68 65 69 67 68 74 26 71 75 6f 74 3b 3a 31 34 31 31 2c 26 71 75 6f 74 3b 77 69 64 74 68 26 71 75 6f 74 3b 3a 39 34 30 2c 26 71 75 6f 74 3b 6d 69 6d 65 5f Data Ascii: 6.moxi.onl\/img-pr\/a\/1914e33a-0add-4862-b559-58dc322e9a2b\/0_2_small.jpg","raw_url":"https:\/\/i16.moxi.onl\/img-pr\/a\/1914e33a-0add-4862-b559-58dc322e9a2b\/0_2_raw.jpg","height":1411,"width":940,"mime_
2024-10-23 22:50:49 UTC	4344	IN	Data Raw: 3b 73 65 6e 69 6f 72 5f 63 6f 6d 6d 75 6e 69 74 79 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 61 70 70 72 6f 78 5f 6c 69 76 69 6e 67 5f 61 72 65 61 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 73 68 6f 77 5f 62 72 6f 6b 65 72 61 67 65 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 76 65 73 74 69 6d 61 74 65 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6c 69 73 74 69 6e 67 5f 63 61 74 65 67 6f 72 69 65 73 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 6c 75 78 75 72 79 2d 65 68 64 32 26 71 75 6f 74 3b 5d 2c 26 71 75 6f 74 3b 63 75 72 72 65 6e 63 79 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 44 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 6c 73 5f 63 75 72 72 65 6e 63 79 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 44 26 71 Data Ascii: ;senior_community":null,"approx_living_area":null,"show_usererage":false,"vestimate":null,"listing_categories":["luxury-ehd2"],"currency":"USD","mls_currency":"USD&q
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 6f 74 3b 66 61 76 6f 72 69 74 65 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 66 61 76 6f 72 69 74 65 69 64 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 64 6f 5f 6e 6f 74 5f 73 68 6f 77 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 75 73 65 72 5f 72 61 74 69 6e 67 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 63 75 6d 75 6c 61 74 69 76 65 5f 64 61 79 73 5f 6f 6e 5f 6d 61 72 6b 65 74 26 71 75 6f 74 3b 3a 31 34 2c 26 71 75 6f 74 3b 67 61 72 61 67 65 5f 73 70 61 63 65 73 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 70 72 65 6d 69 65 72 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 77 5f 63 6f 6c 6c 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6d 6f 64 65 72 6e 26 71 75 Data Ascii: ot;favorite":false,"favoriteid":null,"do_not_show":false,"user_rating":null,"cumulative_days_on_market":14,"garage_spaces":null,"premier":false,"w_collection":false,"modern&qu
2024-10-23 22:50:49 UTC	5336	IN	Data Raw: 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 39 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 2d 30 30 31 39 39 39 5c 2f 73 76 76 5c 2f 38 36 33 34 65 38 32 63 63 31 35 34 37 32 65 36 39 35 32 32 31 65 38 64 39 31 30 64 61 64 32 35 31 37 65 38 62 64 36 33 5c 2f 31 5f 33 5f 73 6d 61 6c 6c 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 68 61 73 5f 67 61 6c 6c 65 72 79 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6d 61 69 6e 5f 69 6d 61 67 65 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 68 65 69 67 68 74 26 71 75 6f 74 3b 3a 31 33 36 37 2c 26 71 75 6f 74 3b 77 69 64 74 68 26 71 75 6f 74 3b 3a 32 30 34 38 2c 26 71 75 6f 74 3b 63 61 70 74 69 6f 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 Data Ascii: ;:"https:\/\/i9.moxi.onl\/img-pr-001999\/svv\/8634e82cc15472e695221e8d910dad2517e8bd63\/1_3_small.jpg","has_gallery":false,"main_image":false,"height":1367,"width":2048,"caption":"",&qu
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 79 20 5c 26 71 75 6f 74 3b 41 6d 79 20 44 2e 5c 26 71 75 6f 74 3b 20 42 72 6f 77 6e 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 73 65 6c 6c 69 6e 67 5f 61 67 65 6e 74 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 73 65 6c 6c 69 6e 67 5f 61 67 65 6e 74 5f 6f 66 66 69 63 65 5f 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 6c 73 5f 6e 6f 6e 5f 72 65 73 74 72 69 63 74 65 64 5f 73 6f 6c 64 5f 64 69 73 70 6c 61 79 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 63 6f 6d 6d 65 6e 74 73 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 42 65 6c 6f 76 65 64 20 47 61 72 64 65 6e 73 3a 20 41 6e 20 4f 61 6b 20 43 72 65 65 6b 20 57 61 74 65 72 66 72 6f 6e 74 20 43 72 65 61 74 69 76 65 Data Ascii: y \"Amy D.\" Brown","selling_agentname":"","selling_agent_office_name":"","mls_non_restricted_sold_display":false,"comments":"Beloved Gardens: An Oak Creek Waterfront Creative
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 44 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 6c 73 5f 76 6f 77 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6f 72 69 67 69 6e 61 74 69 6e 67 5f 73 6f 75 72 63 65 5f 6d 6c 73 69 64 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 61 62 6f 76 65 5f 67 72 61 64 65 5f 66 69 6e 69 73 68 65 64 5f 61 72 65 61 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 62 65 6c 6f 77 5f 67 72 61 64 65 5f 66 69 6e 69 73 68 65 64 5f 61 72 65 61 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6c 69 76 69 6e 67 5f 61 72 65 61 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 62 75 69 6c 64 69 6e 67 5f 61 72 65 61 26 71 75 6f 74 3b 3a 31 38 31 33 2c 26 71 75 6f 74 3b 62 72 6f 6b 65 72 5f Data Ascii: ot;:"USD","mls_vow_enabled":false,"originating_source_mlsid":null,"above_grade_finished_area":null,"below_grade_finished_area":null,"living_area":null,"building_area":1813,"userer_
2024-10-23 22:50:49 UTC	4344	IN	Data Raw: 6f 74 3b 3a 31 39 39 39 37 33 31 35 35 2c 26 71 75 6f 74 3b 64 69 73 70 6c 61 79 5f 73 71 66 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 2c 38 31 33 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 64 69 73 70 6c 61 79 5f 70 72 69 63 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 24 31 2c 38 30 30 2c 30 30 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 69 63 65 26 71 75 6f 74 3b 3a 31 38 30 30 30 30 30 2c 26 71 75 6f 74 3b 73 74 61 74 75 73 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 63 74 69 76 65 26 71 75 6f 74 3b 7d 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 70 72 6f 70 63 61 72 64 2d 6c 69 73 74 69 6e 67 2d 69 64 3d 22 31 39 39 36 37 37 34 37 38 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 63 61 72 64 2d 6c 69 73 74 69 6e Data Ascii: ot;:199973155,"display_sqft":"1,813","display_price":"$1,800,000","price":1800000,"status":"Active"}"></div></div><div data-propcard-listing-id="199677478"><div class="searchcard-listin
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 31 2d 65 30 30 32 2d 34 37 64 35 2d 39 65 63 64 2d 63 33 38 66 36 62 36 37 66 63 37 36 5c 2f 30 5f 32 5f 74 68 75 6d 62 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 74 69 74 6c 65 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 73 6d 61 6c 6c 5f 75 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 36 31 30 64 36 39 33 31 2d 65 30 30 32 2d 34 37 64 35 2d 39 65 63 64 2d 63 33 38 66 36 62 36 37 66 63 37 36 5c 2f 30 5f 32 5f 73 6d 61 6c 6c 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 72 61 77 5f 75 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 32 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 36 Data Ascii: 1-e002-47d5-9ecd-c38f6b67fc76\/0_2_thumb.jpg","title":null,"small_url":"https:\/\/i2.moxi.onl\/img-pr\/a\/610d6931-e002-47d5-9ecd-c38f6b67fc76\/0_2_small.jpg","raw_url":"https:\/\/i2.moxi.onl\/img-pr\/a\/6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.10	49835	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	865	OUT	GET /service/v1/branding/company?callback=jQuery3710923492156920481_1729723842520&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&company_uuid=4216987&agent_uuid=b5555792-2a81-434a-ba98-10845eabb0dc&office_uuid=12153963&_=1729723842521 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	806	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:49 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx status: 200 OK x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-headers: FROM_APP, FROM-APP cache-control: max-age=360, private etag: W/"661a747497e23efbb5b82b7c79ac15dd" x-request-id: 633508f5-bdef-4e69-a877-4a005de825b6 x-runtime: 0.048586 x-app-server: wms_svc_branding/internal-k8s connection: close
2024-10-23 22:50:49 UTC	15578	IN	Data Raw: 33 43 46 43 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 30 28 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 72 65 73 75 6c 74 5f 74 79 70 65 22 3a 22 48 61 73 68 22 2c 22 72 65 73 75 6c 74 5f 6c 69 73 74 22 3a 5b 7b 22 66 6f 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 66 6f 6e 74 5f 31 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 66 6f 6e 74 5f 32 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 62 62 62 62 62 62 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 72 69 6d 61 72 79 5f 62 6f 64 79 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 66 32 62 35 32 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 Data Ascii: 3CFC/**/jQuery3710923492156920481_1729723842520({"status":"success","data":{"result_type":"Hash","result_list":[{"fonts":[{"name":"font_1","color":"#ffffff"},{"name":"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"sec
2024-10-23 22:50:49 UTC	42	IN	Data Raw: 22 3a 22 22 2c 22 62 75 74 74 6f 6e 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 68 61 74 0d 0a Data Ascii: ":"","button_font_color":"#ffffff","chat
2024-10-23 22:50:49 UTC	16368	IN	Data Raw: 33 46 45 38 0d 0a 5f 61 6c 6c 6f 77 65 64 5f 64 61 79 73 22 3a 5b 5d 2c 22 63 6d 61 5f 64 65 66 61 75 6c 74 5f 73 74 79 6c 65 22 3a 22 6d 6f 64 65 72 6e 22 2c 22 63 6d 61 5f 76 69 65 77 5f 75 72 6c 5f 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 65 73 65 6e 74 2e 63 62 6d 6f 78 69 2e 63 6f 6d 22 2c 22 63 72 6d 5f 70 72 69 6d 61 72 79 5f 63 6f 6c 6f 72 22 3a 22 23 30 31 32 31 36 39 22 2c 22 65 63 6f 6d 6d 5f 61 6c 6c 6f 77 5f 70 6f 72 63 68 22 3a 22 66 61 6c 73 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 70 61 67 65 5f 75 72 6c 22 3a 22 22 2c 22 66 6f 6e 74 5f 66 61 63 65 5f 70 72 69 6d 61 72 79 22 3a 22 27 52 6f 62 6f 74 6f 27 2c 20 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d Data Ascii: 3FE8_allowed_days":[],"cma_default_style":"modern","cma_view_url_root":"https://present.cbmoxi.com","crm_primary_color":"#012169","ecomm_allow_porch":"false","facebook_page_url":"","font_face_primary":"'Roboto', 'Helvetica Neue', Helvetica, Arial, sans-
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 41 30 34 45 0d 0a 64 22 3a 22 36 34 31 35 66 66 32 30 2d 39 33 65 65 2d 30 31 33 35 2d 38 32 33 63 2d 30 30 35 30 35 36 39 63 35 34 61 64 22 2c 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 63 6f 70 79 72 69 67 68 74 22 3a 22 5c 75 30 30 32 36 63 6f 70 79 3b 20 23 23 59 45 41 52 23 23 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 47 75 6e 64 61 6b 65 72 22 2c 22 65 6e 74 69 74 79 5f 70 61 6c 65 74 74 65 5f 61 63 6c 22 3a 5b 7b 22 2a 22 3a 22 64 65 6e 79 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 3a 7b 22 31 30 30 30 37 37 32 38 22 3a 22 61 6c 6c 6f 77 22 7d 7d 5d 2c 22 69 6d 61 67 65 5f 63 6d 61 5f 70 64 66 5f 6c 6f 67 6f 5f 63 6f 76 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 6c 6f 75 64 2e 72 65 61 6c 6f 67 79 70 72 6f 64 Data Ascii: A04Ed":"6415ff20-93ee-0135-823c-0050569c54ad","active":true,"copyright":"\u0026copy; ##YEAR## Coldwell Banker Gundaker","entity_palette_acl":[{"*":"deny","organizations":{"10007728":"allow"}}],"image_cma_pdf_logo_cover":"https://images.cloud.realogyprod
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 67 65 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 73 69 64 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 66 75 6c 6c 79 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 69 6e 63 69 70 6c 65 73 20 6f 66 20 74 68 65 20 46 61 69 72 20 48 6f 75 73 69 6e 67 20 41 63 74 20 61 6e 64 20 74 68 65 20 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 41 63 74 2e 20 4f 77 6e 65 64 20 62 79 20 61 20 73 75 62 73 69 64 69 61 72 79 20 6f 66 20 4e 52 54 20 4c 4c 43 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 61 6e 64 20 74 68 65 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 4c 6f 67 6f 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 73 65 72 76 69 63 65 20 6d 61 72 6b 73 Data Ascii: ge. All Rights Reserved. Coldwell Banker Residential usererage fully supports the principles of the Fair Housing Act and the Equal Opportunity Act. Owned by a subsidiary of NRT LLC. Coldwell Banker and the Coldwell Banker Logo are registered service marks
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 6c 6f 75 64 2e 72 65 61 6c 6f 67 79 70 72 6f 64 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 69 65 73 2f 43 42 52 2f 50 30 30 35 30 30 30 30 30 46 44 64 71 51 57 33 67 39 69 6a 49 35 79 4b 45 44 69 72 56 77 30 6f 30 6c 38 76 77 71 42 75 2f 6c 6f 67 6f 73 2f 50 30 31 36 30 30 30 30 30 47 32 4f 43 4a 77 6d 49 4a 6e 6f 43 4b 46 36 5a 73 34 79 34 58 62 79 67 47 62 63 4a 65 36 76 2e 6a 70 67 3f 77 69 64 74 68 3d 35 30 30 22 2c 22 62 75 74 74 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 33 39 38 39 63 39 22 2c 22 63 68 72 6f 6d 65 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 6c 6f 75 64 2e 72 65 61 6c 6f 67 79 70 72 6f 64 2e 63 6f 6d 2f 63 6f 6d Data Ascii: tps://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJwmIJnoCKF6Zs4y4XbygGbcJe6v.jpg?width=500","button_background_color":"#3989c9","chrome_header_logo_path":"https://images.cloud.realogyprod.com/com
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 61 6e 79 5f 6c 65 61 64 5f 73 6f 75 72 63 65 5f 77 65 62 22 3a 22 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 74 79 22 2c 22 65 63 6f 6d 6d 5f 61 6c 6c 6f 77 5f 63 75 73 74 6f 6d 5f 6c 6f 67 6f 22 3a 22 66 61 6c 73 65 22 2c 22 65 63 6f 6d 6d 5f 69 6d 61 67 65 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 22 3a 22 22 2c 22 65 63 6f 6d 6d 5f 69 6d 61 67 65 5f 73 69 67 6e 75 70 5f 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2d 73 74 61 74 69 63 2e 6d 6f 78 69 77 6f 72 6b 73 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 62 72 2f 74 63 6d 61 2f 6c 6f 67 6f 5f 77 68 69 74 65 5f 74 72 61 6e 73 5f 62 67 2e 70 6e 67 22 2c 22 65 6d 61 69 6c 5f 62 75 74 74 6f 6e 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c Data Ascii: any_lead_source_web":"Coldwell Banker Realty","ecomm_allow_custom_logo":"false","ecomm_image_header_logo":"","ecomm_image_signup_logo":"https://images-static.moxiworks.com/static/images/br/tcma/logo_white_trans_bg.png","email_button_font_color":"#ffffff",
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 75 70 67 72 61 64 65 20 74 6f 20 61 20 6e 65 77 65 72 20 77 65 62 20 62 72 6f 77 73 65 72 2e 20 4e 65 77 65 72 20 62 72 6f 77 73 65 72 73 20 68 61 76 65 20 69 6d 70 6f 72 74 61 6e 74 20 73 65 63 75 72 69 74 79 20 75 70 64 61 74 65 73 20 61 6e 64 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 62 65 74 74 65 72 20 6f 70 74 69 6d 69 7a 65 64 20 66 6f 72 20 66 61 73 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 77 69 74 68 20 6d 6f 64 65 72 6e 20 77 65 62 73 69 74 65 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 74 72 61 6e 73 66 65 72 20 61 6e 79 20 62 6f 6f 6b 6d 61 72 6b 73 20 6f 72 20 66 61 76 6f 72 69 74 65 73 20 79 6f 75 20 68 61 76 65 20 73 61 76 65 64 2e 20 43 6c 69 63 6b 20 6f 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 69 63 6f 6e 73 20 Data Ascii: upgrade to a newer web browser. Newer browsers have important security updates and are generally better optimized for fast performance with modern websites. You will be able to transfer any bookmarks or favorites you have saved. Click on one of the icons
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 22 2c 22 6e 61 6d 65 22 3a 22 51 75 61 6e 74 75 6d 44 69 67 69 74 61 6c 20 41 75 74 6f 4d 61 69 6c 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 75 72 6e 20 6f 6e 20 6c 69 6e 6b 20 74 6f 20 41 75 74 6f 4d 61 69 6c 20 69 6e 20 45 6e 67 61 67 65 20 43 61 6d 70 61 69 67 6e 73 20 66 6f 72 20 62 72 6f 6b 65 72 61 67 65 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 51 75 61 6e 74 75 6d 20 44 69 67 69 74 61 6c 2e 22 7d 2c 22 72 61 74 69 6e 67 73 5f 61 6e 64 5f 72 65 76 69 65 77 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 61 74 69 6e 67 73 20 61 6e 64 20 52 65 76 69 65 77 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 6e 61 62 6c 65 20 72 61 74 69 6e 67 73 20 Data Ascii: ","name":"QuantumDigital AutoMail","enabled":false,"description":"Turn on link to AutoMail in Engage Campaigns for usererage customers of Quantum Digital."},"ratings_and_reviews":{"name":"Ratings and Reviews","enabled":false,"description":"Enable ratings
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 36 39 44 43 41 44 22 2c 22 32 39 43 46 38 38 38 32 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 32 39 43 46 38 32 35 45 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 36 33 43 42 34 44 36 33 2d 34 39 32 39 2d 34 42 45 31 2d 38 43 39 33 2d 37 36 36 41 41 39 43 45 43 31 34 44 22 2c 22 32 39 43 46 38 34 30 44 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 32 39 43 46 38 32 32 30 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 43 41 41 37 33 39 33 36 2d 34 42 34 38 2d 34 44 44 45 2d 41 33 37 32 2d 42 44 45 33 46 34 42 46 33 37 33 46 22 2c 22 32 39 43 46 38 38 37 42 2d 33 31 31 Data Ascii: 69DCAD","29CF8882-3115-11D7-A2C7-00B0D0494558","29CF825E-3115-11D7-A2C7-00B0D0494558","63CB4D63-4929-4BE1-8C93-766AA9CEC14D","29CF840D-3115-11D7-A2C7-00B0D0494558","29CF8220-3115-11D7-A2C7-00B0D0494558","CAA73936-4B48-4DDE-A372-BDE3F4BF373F","29CF887B-311

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.10	49837	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	615	OUT	GET /service/v1/auth/images/ajax-loader.gif HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	268	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:49 GMT content-type: image/gif content-length: 3951 server: nginx last-modified: Mon, 15 Jul 2024 18:05:41 GMT etag: "669564f5-f6f" accept-ranges: bytes x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:49 UTC	3951	IN	Data Raw: 47 49 46 38 39 61 80 00 0f 00 f2 00 00 ed ed ed 44 44 44 c6 c6 c6 ba ba ba 6f 6f 6f 44 44 44 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 80 00 0f 00 00 03 e7 08 b2 0b fe ac 3d 17 c5 a4 f1 aa 7c ab f6 1d 37 81 a3 08 99 18 b3 91 ab 59 49 a9 fb 96 ec 6b 9d f5 8c cb b9 dd f3 40 d5 4e 18 23 b6 8c 36 5a 10 76 64 fa 74 45 27 b4 79 8b 56 a9 4a e4 34 39 94 fe 9e 57 ae 35 eb 5d 86 b7 e8 6f 59 0b 5e bb cf 6a b8 99 2c 67 cf bb 3e ba 1e bf 1f f3 ff 7e 81 58 78 62 83 82 85 88 69 77 87 8a 76 0c 03 90 91 03 13 92 91 94 95 93 0f 98 99 0e 9b 97 95 9f 92 a1 96 9a 98 a3 90 a7 9c 00 9b 9e a5 a0 ae a2 b0 a4 9d a6 b2 a8 Data Ascii: GIF89aDDDoooDDD!NETSCAPE2.0!Created with ajaxload.info!,=\|7YIk@N#6ZvdtE'yVJ49W5]oY^j,g>~Xxbiwv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.10	49841	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	624	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-flexslider-814ed83f9289c3e5ab877d6898687235.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:49 UTC	510	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:33 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:15 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:33 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout11-pr x-varnish: 245566036 691536671 age: 100155 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 379784 x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:49 UTC	983	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 24 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 73 6c 69 64 65 72 3d 24 28 65 6c 29 2c 76 61 72 73 3d 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 24 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 6f 70 74 69 6f 6e 73 29 2c 6e 61 6d 65 73 70 61 63 65 3d 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 74 6f 75 63 68 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 2c 65 76 65 6e 74 54 79 70 65 3d 28 74 6f 75 63 68 29 3f 22 74 6f 75 63 68 65 6e 64 22 Data Ascii: ;(function($){$.flexslider=function(el,options){var slider=$(el),vars=$.extend({},$.flexslider.defaults,options),namespace=vars.namespace,touch=("ontouchstart"in window)\|\|window.DocumentTouch&&document instanceof DocumentTouch,eventType=(touch)?"touchend"
2024-10-23 22:50:49 UTC	13032	IN	Data Raw: 3d 7b 7d 3b 73 6c 69 64 65 72 2e 6d 61 6e 75 61 6c 50 61 75 73 65 3d 66 61 6c 73 65 3b 73 6c 69 64 65 72 2e 74 72 61 6e 73 69 74 69 6f 6e 73 3d 21 76 61 72 73 2e 76 69 64 65 6f 26 26 21 66 61 64 65 26 26 76 61 72 73 2e 75 73 65 43 53 53 26 26 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 62 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 2c 70 72 6f 70 73 3d 5b 27 70 65 72 73 70 65 63 74 69 76 65 50 72 6f 70 65 72 74 79 27 2c 27 57 65 62 6b 69 74 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 4d 6f 7a 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 4f 50 65 72 73 70 65 63 74 69 76 65 27 2c 27 6d 73 50 65 72 73 70 65 63 74 69 76 65 27 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 70 72 6f 70 73 29 7b 69 66 28 6f 62 6a Data Ascii: ={};slider.manualPause=false;slider.transitions=!vars.video&&!fade&&vars.useCSS&&(function(){var obj=document.createElement('div'),props=['perspectiveProperty','WebkitPerspective','MozPerspective','OPerspective','msPerspective'];for(var i in props){if(obj
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 73 2e 61 6e 69 6d 61 74 69 6f 6e 53 70 65 65 64 2c 76 61 72 73 2e 65 61 73 69 6e 67 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 74 61 72 67 65 74 29 2e 66 61 64 65 49 6e 28 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 53 70 65 65 64 2c 76 61 72 73 2e 65 61 73 69 6e 67 2c 73 6c 69 64 65 72 2e 77 72 61 70 75 70 29 3b 7d 65 6c 73 65 7b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 73 6c 69 64 65 72 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 2e 63 73 73 28 7b 22 6f 70 61 63 69 74 79 22 3a 30 2c 22 7a 49 6e 64 65 78 22 3a 31 7d 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 65 71 28 74 61 72 67 65 74 29 2e 63 73 73 28 7b 22 6f 70 61 63 69 74 79 22 3a 31 2c 22 7a 49 6e 64 65 78 22 3a 32 7d 29 3b 73 6c 69 64 65 72 2e 73 6c 69 64 65 73 2e 75 6e 62 Data Ascii: s.animationSpeed,vars.easing);slider.slides.eq(target).fadeIn(vars.animationSpeed,vars.easing,slider.wrapup);}else{slider.slides.eq(slider.currentSlide).css({"opacity":0,"zIndex":1});slider.slides.eq(target).css({"opacity":1,"zIndex":2});slider.slides.unb
2024-10-23 22:50:49 UTC	12576	IN	Data Raw: 65 6f 66 20 50 72 6f 78 79 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 74 72 75 65 3b 74 72 79 7b 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 44 61 74 65 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 29 7b 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 50 72 6f 74 6f 74 79 Data Ascii: eof Proxy==="function")return true;try{Date.prototype.toString.call(Reflect.construct(Date,[],function(){}));return true;}catch(e){return false;}}function _getPrototypeOf(o){_getPrototypeOf=Object.setPrototypeOf?Object.getPrototypeOf:function _getPrototy
2024-10-23 22:50:49 UTC	2896	IN	Data Raw: 6b 65 79 3a 22 5f 6d 61 6e 61 67 65 4e 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 5f 69 6e 65 72 74 4d 61 6e 61 67 65 72 2e 72 65 67 69 73 74 65 72 28 65 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 61 64 64 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 6d 61 6e 61 67 65 4e 6f 64 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 65 3d 74 68 69 73 2e 5f 69 6e 65 72 74 4d 61 6e 61 67 65 72 2e 64 65 72 65 67 69 73 74 65 72 28 65 2c 74 68 69 73 29 29 26 26 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 64 65 6c 65 74 65 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 6d 61 6e 61 67 65 53 75 62 74 72 65 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: key:"_manageNode",value:function(e){e=this._inertManager.register(e,this),this._managedNodes.add(e)}},{key:"_unmanageNode",value:function(e){(e=this._inertManager.deregister(e,this))&&this._managedNodes.delete(e)}},{key:"_unmanageSubtree",value:function(e
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 65 2c 74 29 7b 69 66 28 74 29 7b 69 66 28 21 74 68 69 73 2e 5f 69 6e 65 72 74 52 6f 6f 74 73 2e 68 61 73 28 65 29 26 26 28 74 3d 6e 65 77 20 69 28 65 2c 74 68 69 73 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 6e 65 72 74 22 2c 22 22 29 2c 74 68 69 73 2e 5f 69 6e 65 72 74 52 6f 6f 74 73 2e 73 65 74 28 65 2c 74 29 2c 21 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6f 6e 74 61 69 6e 73 28 65 29 29 29 66 6f 72 28 76 61 72 20 6e 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 6e 3b 29 31 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 5f 28 6e 29 2c 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 65 6c 73 65 20 74 68 69 73 2e 5f 69 6e 65 72 74 52 6f 6f 74 73 2e 68 61 73 28 65 29 26 26 28 74 68 69 73 2e 5f 69 6e 65 72 74 52 6f 6f 74 73 2e Data Ascii: e,t){if(t){if(!this._inertRoots.has(e)&&(t=new i(e,this),e.setAttribute("inert",""),this._inertRoots.set(e,t),!this._document.body.contains(e)))for(var n=e.parentNode;n;)11===n.nodeType&&_(n),n=n.parentNode}else this._inertRoots.has(e)&&(this._inertRoots.
2024-10-23 22:50:49 UTC	5792	IN	Data Raw: 74 79 28 22 69 6e 65 72 74 22 29 7c 7c 28 72 3d 6e 65 77 20 73 28 64 6f 63 75 6d 65 6e 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 6e 65 72 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 6e 65 72 74 22 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 73 65 74 49 6e 65 72 74 28 74 68 69 73 2c 65 29 7d 7d 29 29 29 7d 29 29 3b 0a 3b 76 61 72 20 72 75 6e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ty("inert")\|\|(r=new s(document),Object.defineProperty(HTMLElement.prototype,"inert",{enumerable:!0,get:function(){return this.hasAttribute("inert")},set:function(e){r.setInert(this,e)}})))}));;var runtime=function(t){"use strict";var e,r=Object.prototype
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 74 2c 61 2e 61 72 67 3d 65 2c 69 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 67 29 3a 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 61 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 74 2e 61 72 67 3b 72 65 74 75 72 6e 22 62 72 65 61 6b 22 3d 3d 3d 74 2e 74 79 70 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 74 68 69 73 2e 6e 65 78 74 3d 74 2e 61 72 67 3a 22 72 65 74 75 72 6e 22 3d 3d 3d 74 2e 74 79 70 65 3f 28 74 68 69 73 2e 72 76 61 6c 3d 74 68 69 73 2e 61 72 67 3d 74 2e 61 72 67 2c 74 68 69 73 Data Ascii: };return a.type=t,a.arg=e,i?(this.method="next",this.next=i.finallyLoc,g):this.complete(a)},complete:function(t,e){if("throw"===t.type)throw t.arg;return"break"===t.type\|\|"continue"===t.type?this.next=t.arg:"return"===t.type?(this.rval=this.arg=t.arg,this
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 65 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 38 29 2c 6f 3d 65 28 36 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2c 6f 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 65 3d 65 28 32 33 29 2c 74 2e 65 78 70 6f 72 74 73 3d 65 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 32 29 2c 69 3d 6e 28 31 33 29 2c 61 3d 6e 28 33 30 29 2c 75 3d 6e 28 31 31 29 2c 63 3d 6e 28 37 39 29 2c 66 3d 6e 28 38 30 29 2c 73 3d 28 6e 3d 6e 28 37 33 29 2c 41 72 72 61 79 29 2c 70 Data Ascii: e]);return t}},function(t,r,e){var n=e(58),o=e(65);t.exports=Object.keys\|\|function(t){return n(t,o)}},function(t,r,e){e=e(23),t.exports=e("document","documentElement")},function(r,e,n){var o=n(2),i=n(13),a=n(30),u=n(11),c=n(79),f=n(80),s=(n=n(73),Array),p
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 29 2c 73 3d 63 2e 4d 61 70 2c 70 3d 63 2e 68 61 73 2c 6c 3d 63 2e 73 65 74 2c 68 3d 6e 28 5b 5d 2e 70 75 73 68 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 65 2c 6e 3d 75 28 74 68 69 73 29 2c 63 3d 61 28 6e 29 2c 76 3d 5b 5d 2c 79 3d 6e 65 77 20 73 2c 64 3d 69 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 6f 28 74 29 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 65 3d 64 28 72 3d 6e 5b 67 5d 29 2c 70 28 79 2c 65 29 7c 7c 6c 28 79 2c 65 2c 72 29 3b 72 65 74 75 72 6e 20 66 28 79 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 68 28 76 2c 74 29 7d 29 29 2c 76 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 6f 3d 65 28 31 33 29 2c 69 3d 65 28 31 34 34 29 2c Data Ascii: ),s=c.Map,p=c.has,l=c.set,h=n([].push);t.exports=function(t){for(var r,e,n=u(this),c=a(n),v=[],y=new s,d=i(t)?function(t){return t}:o(t),g=0;g<c;g++)e=d(r=n[g]),p(y,e)\|\|l(y,e,r);return f(y,(function(t){h(v,t)})),v}},function(t,r,e){var n,o=e(13),i=e(144),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.10	49842	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	761	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=782b628426a895c0dfd7727f0e7fb402 HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:49 UTC	496	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 11:56:50 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:20 GMT cache-control: max-age=86400 expires: Thu, 24 Oct 2024 11:56:50 GMT vary: Accept-Encoding x-content-type-options: nosniff content-type: application/javascript v-backend: dugout13-pr x-varnish: 651559037 448170376 age: 39239 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 18692 x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:49 UTC	3893	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-10-23 22:50:49 UTC	10136	IN	Data Raw: 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 Data Ascii: \ud83e\uddd1\ud83c\udffd\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb\udffc\udffe\udfff]\|\ud83e\uddd1\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb-\udffd\udfff]\|\ud83e\uddd1\ud83c\udfff\u200d\u2764\u
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 75 64 64 65 38 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 33 5c 75 64 64 66 61 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 63 5c 75 64 38 33 63 5b 5c 75 64 64 65 62 5c 75 64 64 66 38 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 64 5c 75 64 38 33 63 5c 75 64 64 66 30 7c 5c 75 64 38 33 63 5c 75 64 64 66 65 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 66 39 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 66 5c 75 64 38 33 63 5b 5c 75 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 5c 75 64 65 33 38 2d 5c 75 64 65 33 61 5c 75 64 65 35 30 5c 75 64 65 35 Data Ascii: udde8\uddea\uddec\uddee\uddf3\uddfa]\|\ud83c\uddfc\ud83c[\uddeb\uddf8]\|\ud83c\uddfd\ud83c\uddf0\|\ud83c\uddfe\ud83c[\uddea\uddf9]\|\ud83c\uddff\ud83c[\udde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude5
2024-10-23 22:50:49 UTC	3215	IN	Data Raw: 6c 61 63 65 28 66 2c 22 22 29 3a 64 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 64 29 7b 72 65 74 75 72 6e 20 75 5b 64 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 64 2c 75 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 64 29 2e 72 65 70 6c 61 63 65 28 68 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 64 2c 75 29 7b 66 6f 72 28 76 61 72 20 66 3d 5b 5d 2c 63 3d 30 2c 65 3d 30 2c 62 3d 30 3b 62 3c 64 2e 6c 65 6e 67 74 68 3b 29 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 2b 29 2c 65 3f 28 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 65 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 63 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 65 3d 30 29 3a 35 35 32 39 36 3c 3d 63 26 26 Data Ascii: lace(f,""):d)}function r(d){return u[d]}function a(){return null}function n(d,u){return String(d).replace(h,u)}function o(d,u){for(var f=[],c=0,e=0,b=0;b<d.length;)c=d.charCodeAt(b++),e?(f.push((65536+(e-55296<<10)+(c-56320)).toString(16)),e=0):55296<=c&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.10	49844	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	792	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842522&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842523 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:49 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"c2844ceb1532cdbb02dd282c0811278b" cache-control: max-age=0, private, must-revalidate x-request-id: 4d8e19a3-52f0-49b3-8d90-54bf6431c534 x-runtime: 0.008711 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:49 UTC	111	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 32 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842522({"success":false,"error":"No authorization header provided"})
2024-10-23 22:50:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.10	49845	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	792	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842524&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842525 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:49 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:49 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"d66b9df4fd2a5cdad8acac0b844c361d" cache-control: max-age=0, private, must-revalidate x-request-id: 6c411215-ccce-4e0c-ab39-e5f54a014a9f x-runtime: 0.008968 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:49 UTC	116	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 34 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a 30 0d 0a 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842524({"success":false,"error":"No authorization header provided"})0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.10	49847	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	790	OUT	GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1 Host: kristalittle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _ga=GA1.2.906342610.1729723845; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1
2024-10-23 22:50:49 UTC	459	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:07:14 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:39:05 GMT content-length: 15238 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 22:07:14 GMT x-content-type-options: nosniff content-type: image/gif v-backend: dugout11-pr x-varnish: 250380777 241174626 age: 2614 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:49 UTC	1034	IN	Data Raw: 47 49 46 38 39 61 a0 01 1a 00 c4 00 00 fb fb fb f7 f7 f7 f3 f3 f3 ef ef ef ea ea ea e6 e6 e6 e2 e2 e2 de de de da da da d6 d6 d6 d2 d2 d2 ce ce ce ca ca ca c5 c5 c5 c1 c1 c1 bd bd bd b9 b9 b9 b5 b5 b5 b1 b1 b1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff e0 d1 44 52 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a7 07 01 c0 20 01 8f c8 a4 72 c9 6c 3a 9f 50 27 a4 40 8a 30 16 d8 ac 16 db 28 45 20 e0 b0 58 5c 7a 6c cf 58 86 69 cc 0e 97 d1 e7 ae e4 db 66 bf e1 5a 75 a9 6e 97 98 f1 59 72 74 7c 6e 7e 80 59 7a 12 84 64 86 87 0b 82 8b 85 7f 87 89 91 60 77 87 90 96 Data Ascii: GIF89a!NETSCAPE2.0!,DRihlp,tmx\| rl:P'@0(E X\zlXifZunYrt\|n~Yzd`w
2024-10-23 22:50:49 UTC	5792	IN	Data Raw: 1c 2f c9 26 d7 2c f3 bd 2b c7 8c b2 c5 38 fb 9c b2 ba 3d 9f 3c 34 c4 34 9f 6b f3 ae 0f 53 eb eb c0 0d 73 2b f0 bf f6 1a fc 34 d5 db 06 cc 2e d4 00 2b 7c 35 c2 5d 8f 3b 35 d8 55 7b 6d 2d d7 65 8b bd 35 d6 16 2f 0c 6e d4 d3 8e cd 70 d8 dc ba 8d 2d dc c9 da fd 2c de 4d 27 1b 2d cb 4b 8f 1b b4 d1 16 ff 2d 34 d0 30 13 7e af e1 8a df 9c b8 ce 3f 2f 8e 05 e0 3b 3b 5e f2 e1 92 2f 40 79 e4 96 e7 ac 74 e5 ea 32 0e f9 ff d1 dc 8a fe 39 e7 c8 f6 ad ec d7 ee d2 1d f7 da f4 ba 9e 6c 00 ac 9f 2b 7b b7 b0 b7 9e b6 d4 b5 83 7b fb ba 49 fb be 7b dc bd 63 fb bb ae 72 db 3e fc ec c5 3f 7b 7c ae c9 0b 9f b5 ba b4 9f 3d f0 f3 f8 36 ef ec ed aa eb 1a b1 e6 31 2f 40 fa b4 24 53 2e fe cc e0 83 7c fe cb e9 eb bc be ca 93 87 3f 7e b2 e5 cb 8f be f9 f3 23 5b bf fa f9 ef fa 3d fe 88 Data Ascii: /&,+8=<44kSs+4.+\|5];5U{m-e5/np-,M'-K-40~?/;;^/@yt29l+{{I{cr>?{\|=61/@$S.\|?~#[=
2024-10-23 22:50:49 UTC	7240	IN	Data Raw: a0 01 1a 00 00 05 ff a0 d2 4c 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ab a3 9f 70 48 2c 1a 8f c8 a4 72 c9 74 41 9e 10 89 e4 b1 5a 58 17 0d 69 0b 1a 9d b2 ae 0c a9 84 c5 95 52 55 57 ac 96 0c 35 7f ad e1 b5 aa ec 45 5f b3 63 f6 a4 7b b6 2f e2 79 73 6d 75 29 69 78 5b 83 7d 85 70 62 7a 7c 55 77 72 82 7b 6e 90 7f 8d 2b 74 8a 27 86 92 29 9a 96 6a 81 31 0f a5 0f 11 12 11 2c 0a ac 0a 13 a9 2c a6 a7 b0 2b ad ae 9e 27 b2 a8 aa b5 ad af bc 2a ba b4 2a b6 af a3 28 c2 c0 29 c5 c3 29 c9 ab be b8 26 cf bd ac bf b1 a6 bb d0 d6 d2 25 d4 c4 d1 ca c8 d9 cd 28 cc c7 b9 e4 e2 27 cc eb d3 ea db b7 ee 2d 0e f5 0e 11 11 41 2a 09 fc 0a f8 10 2c ec dd cb c7 82 1f 3f 08 11 00 ae 10 88 4f 5f 0a 83 fe 12 06 b4 d7 b0 a0 41 84 0a 55 30 24 b8 02 e2 bf 89 13 06 3a 44 Data Ascii: Ldihlp,tmx\|pH,rtAZXiRUW5E_c{/ysmu)ix[}pbz\|Uwr{n+t')j1,,+'*())&%('-A,?O_AU0$:D
2024-10-23 22:50:49 UTC	1172	IN	Data Raw: b6 68 d5 9f 59 e7 36 b1 bb b4 e6 df b6 63 14 58 ae a0 35 20 07 8b 59 2c 2f 30 ba 0d 13 e8 b3 51 4c 6f 3e bc c4 15 ec d2 97 57 37 03 7e c5 76 e7 95 16 94 57 31 7d fc f3 e8 e6 99 a3 47 f1 1d 3e 7b f1 f3 4f d4 cf 7e e2 7c 77 12 fb 85 47 5d 7e 26 04 18 5f 01 dc 59 a7 9e ff 7d 29 b4 47 a0 77 d7 31 08 03 01 04 14 b0 0e 4d fa 1d b6 8e 29 2a 50 48 80 01 f6 28 b8 21 0b 14 5a e8 00 86 05 6a e8 00 87 29 78 08 22 7f 19 4e 30 e2 0a 25 5e 28 e2 8a 34 52 f8 62 0b df e1 98 a3 89 28 42 28 a3 8f 2d ea 18 22 79 44 16 09 e4 8d 2c a2 e0 e2 91 cf 25 e9 64 85 36 22 d9 e4 09 4f c2 98 e2 90 57 ba e0 e1 90 0a 36 70 22 89 14 82 b9 c8 98 39 12 60 26 20 62 06 49 c2 97 50 d2 67 09 9a 1d 96 19 67 86 58 d0 59 a4 9a 77 a6 98 a7 9b 23 c0 a9 25 80 73 02 3a 81 a0 61 ea 39 25 9f 83 8e 50 87 Data Ascii: hY6cX5 Y,/0QLo>W7~vW1}G>{O~\|wG]~&_Y})Gw1M)*PH(!Zj)x"N0%^(4Rb(B(-"yD,%d6"OW6p"9`& bIPggXYw#%s:a9%P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.10	49846	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	942	OUT	GET /embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:49 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 22:50:49 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script' Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 52 39 59 77 37 32 65 41 59 34 75 45 34 73 78 41 69 62 4b 55 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="PR9Yw72eAY4uE4sxAibKUQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 Data Ascii: 2Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'R
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 Data Ascii: 0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)format('woff2');unicode-r
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 52 39 59 77 37 32 65 41 59 34 75 45 34 73 78 41 69 62 4b 55 51 22 3e 76 61 72 20 79 74 63 73 69 3d 7b 67 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 28 6e 7c 7c 22 22 29 2b 22 64 61 74 61 5f 22 3b 72 65 74 75 72 6e 20 79 74 63 Data Ascii: ; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-weight: normal;}.player-unavailable a {color: #167ac6; text-decoration: none;}</style><script nonce="PR9Yw72eAY4uE4sxAibKUQ">var ytcsi={gt:function(n){n=(n\|\|"")+"data_";return ytc
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 22 29 7d 2c 0a 66 61 6c 73 65 29 3b 69 66 28 69 73 47 Data Ascii: ange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc")},false);if(isG
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 61 74 61 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 63 68 69 6c 64 5f 6e 6f 64 65 5f 61 75 74 6f 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 65 6e 66 5f 69 73 64 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 6c 6f 67 5f 74 6f 5f 76 69 73 69 74 6f 72 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 70 61 63 66 5f 6c 6f 67 67 69 6e 67 5f 66 6f 72 5f 6d 65 6d 6f 72 79 5f 6c 69 6d 69 74 65 64 5f 74 76 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 61 66 61 72 69 5f 75 69 5f 73 74 61 74 75 73 5f 63 68 65 63 6b 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 73 69 6d 70 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 65 64 5f 73 74 72 69 6e 67 73 Data Ascii: ata":true,"disable_child_node_auto_formatted_strings":true,"disable_enf_isd":true,"disable_log_to_visitor_layer":true,"disable_pacf_logging_for_memory_limited_tv":true,"disable_safari_ui_status_check":true,"disable_simple_mixed_direction_formatted_strings
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 5f 61 64 5f 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6d 65 61 72 69 6e 67 5f 65 78 70 61 6e 73 69 6f 6e 5f 64 61 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 74 68 69 72 64 5f 70 61 72 74 79 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 61 74 63 68 5f 6e 65 78 74 5f 70 61 75 73 65 5f 61 75 74 6f 70 6c 61 79 5f 6c 61 63 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 39 36 5f 62 69 74 5f 63 73 6e 22 3a 74 72 75 65 Data Ascii: layer_bytes_video_tv":true,"enable_skip_ad_guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"enable_smearing_expansion_dai":true,"enable_third_party_info":true,"enable_watch_next_pause_autoplay_lact":true,"enable_web_96_bit_csn":true
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 6b 65 74 6f 5f 62 61 74 63 68 5f 31 36 5f 33 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 6b 65 74 6f 5f 62 61 74 63 68 5f 70 6c 61 79 65 72 5f 70 72 69 6d 61 72 79 5f 63 6f 6e 74 72 6f 6c 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 6d 6f 64 65 72 6e 5f 70 6c 61 79 65 72 5f 63 6f 6e 74 72 6f 6c 73 5f 74 61 70 5f 74 61 72 67 65 74 5f 75 69 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 6d 6f 64 65 72 6e 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 73 61 76 65 5f 74 6f 5f 62 75 74 74 6f 6e 5f 63 6c 69 65 6e 74 5f 66 75 6c 6c 73 63 72 65 65 6e 5f 63 6f 6e 74 72 6f 6c 73 22 3a 74 72 75 65 2c 22 6e 65 74 77 6f 72 6b 6c 65 73 73 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6e 65 77 5f Data Ascii: ,"mweb_enable_keto_batch_16_3":true,"mweb_enable_keto_batch_player_primary_controls":true,"mweb_modern_player_controls_tap_target_ui":true,"mweb_modern_typography":true,"mweb_save_to_button_client_fullscreen_controls":true,"networkless_logging":true,"new_
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 5f 65 6d 5f 72 73 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 Data Ascii: nd_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true,"web_enable_ab_em_rsp":true,"web_enable_ab
2024-10-23 22:50:49 UTC	1656	IN	Data Raw: 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f 6d 70 74 5f 77 61 74 63 68 65 73 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 63 61 70 22 3a 2d 31 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 70 72 6f 6d 70 74 5f 64 65 6c 61 79 5f 6d 69 63 72 6f 73 65 63 6f 6e 64 73 22 3a 33 38 38 38 30 30 30 30 30 30 30 30 30 2c 22 73 6c 6f 77 5f 63 6f 6d 70 72 65 73 73 69 6f 6e 73 5f 62 65 66 6f 72 65 5f 61 62 61 6e 64 6f 6e 5f 63 6f 75 6e 74 22 3a 34 2c 22 73 77 61 74 63 68 65 72 6f Data Ascii: omments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_prompt_watches":-1,"service_worker_push_prompt_cap":-1,"service_worker_push_prompt_delay_microseconds":3888000000000,"slow_compressions_before_abandon_count":4,"swatchero

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.10	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:49 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225049Z-16849878b78dsttbr1qw36rxs800000006v000000000m0fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:49 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.10	49851	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	676	OUT	GET /wp-content/plugins/bwp-minify/cache/minify-b-thickbox-c9f1ac4d10271921b65df940585b53c7.js?ver=A.3.49.20241022.0.6 HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1; _ga_GYEG79KM6W=GS1.1.1729723847.1.0.1729723847.0.0.0; _ga=GA1.1.906342610.1729723845
2024-10-23 22:50:49 UTC	510	IN	HTTP/1.1 200 OK date: Tue, 22 Oct 2024 19:01:30 GMT server: Apache vary: Accept-Encoding last-modified: Tue, 22 Oct 2024 19:01:20 GMT cache-control: public, max-age=2592000 expires: Wed, 23 Oct 2024 19:01:30 GMT x-content-type-options: nosniff content-type: application/x-javascript v-backend: dugout13-pr x-varnish: 250577483 697959226 age: 100158 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 564724 x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:49 UTC	5327	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 21 3d 27 73 74 72 69 6e 67 27 29 7b 76 61 72 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 3d 74 68 69 63 6b 62 6f 78 4c 31 30 6e 2e 6c 6f 61 64 69 6e 67 41 6e 69 6d 61 74 69 6f 6e 3b 7d 0a 2f 2a 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 20 65 64 69 74 20 62 65 6c 6f 77 20 74 68 69 73 20 6c 69 6e 65 20 61 74 20 79 6f 75 72 20 6f 77 6e 20 72 69 73 6b 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 62 5f 69 6e 69 74 28 27 61 2e 74 68 69 63 6b 62 6f 78 2c 20 61 72 65 61 2e 74 68 69 63 6b 62 6f 78 2c 20 69 6e 70 75 74 2e 74 68 69 63 6b 62 6f 78 Data Ascii: if(typeof tb_pathToImage!='string'){var tb_pathToImage=thickboxL10n.loadingAnimation;}/!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/jQuery(document).ready(function(){tb_init('a.thickbox, area.thickbox, input.thickbox
2024-10-23 22:50:49 UTC	8688	IN	Data Raw: 54 42 5f 74 69 74 6c 65 27 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 61 6a 61 78 57 69 6e 64 6f 77 54 69 74 6c 65 27 3e 22 2b 63 61 70 74 69 6f 6e 2b 22 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 63 6c 6f 73 65 41 6a 61 78 57 69 6e 64 6f 77 27 3e 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 20 69 64 3d 27 54 42 5f 63 6c 6f 73 65 57 69 6e 64 6f 77 42 75 74 74 6f 6e 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 27 3e 22 2b 74 68 69 63 6b 62 6f 78 4c 31 30 6e 2e 63 6c 6f 73 65 2b 22 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 74 62 2d 63 6c 6f 73 65 2d 69 63 6f 6e 27 3e 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 69 66 72 Data Ascii: TB_title'><div id='TB_ajaxWindowTitle'>"+caption+"</div><div id='TB_closeAjaxWindow'><button type='button' id='TB_closeWindowButton'><span class='screen-reader-text'>"+thickboxL10n.close+"</span><span class='tb-close-icon'></span></button></div></div><ifr
2024-10-23 22:50:49 UTC	16384	IN	Data Raw: 2b 22 3a 20 22 2b 73 28 65 2e 6c 61 6d 62 64 61 28 6e 75 6c 6c 21 3d 28 6c 3d 6e 75 6c 6c 21 3d 74 3f 63 28 74 2c 22 61 67 65 6e 74 22 29 3a 74 29 3f 63 28 6c 2c 22 70 68 6f 6e 65 22 29 3a 6c 2c 74 29 29 2b 22 3c 2f 70 3e 5c 6e 22 7d 2c 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 2c 73 3d 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 2c 63 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d Data Ascii: +": "+s(e.lambda(null!=(l=null!=t?c(t,"agent"):t)?c(l,"phone"):l,t))+"</p>\n"},11:function(e,t,a,o,i){var l,s=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <p class="form-
2024-10-23 22:50:49 UTC	12576	IN	Data Raw: 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 37 33 2c 63 6f 6c 75 6d 6e 3a 31 34 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 37 33 2c 63 6f 6c 75 6d 6e 3a 31 37 34 7d 7d 7d 29 29 2b 27 3e 5c 6e 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 63 28 75 28 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 69 64 50 72 65 66 69 78 22 29 3a 74 2c 74 29 29 2b 22 5f 77 6d 73 5f 65 63 5f 79 6f 75 72 5f 69 6e 74 65 72 65 73 74 22 2b 28 6e 75 6c 6c 21 3d 28 6c 3d 70 28 61 2c 22 69 66 22 29 2e 63 61 6c 6c 28 73 2c 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 69 73 43 6f 61 67 65 6e 74 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 31 2c 69 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 6e 6f 6f 70 2c 64 61 74 Data Ascii: oc:{start:{line:73,column:142},end:{line:73,column:174}}}))+'>\n <label for="'+c(u(null!=t?p(t,"idPrefix"):t,t))+"_wms_ec_your_interest"+(null!=(l=p(a,"if").call(s,null!=t?p(t,"isCoagent"):t,{name:"if",hash:{},fn:e.program(1,i,0),inverse:e.noop,dat
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 39 32 2c 63 6f 6c 75 6d 6e 3a 31 38 7d 7d 7d 29 29 3f 6c 3a 22 22 29 2b 22 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 22 7d 2c 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 2c 73 3d 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 2c 63 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 6d 70 6c 61 74 65 20 6e 61 6d 65 3d 22 63 6f 6d 70 61 6e 79 22 3e 27 2b 73 28 65 2e 6c Data Ascii: 92,column:18}}}))?l:"")+" </div>\n </div>\n"},51:function(e,t,a,o,i){var l,s=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <template name="company">'+s(e.l
2024-10-23 22:50:49 UTC	1448	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 69 29 7b 76 61 72 20 6c 2c 73 3d 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 2c 63 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 6d 70 6c 61 74 65 20 6e 61 6d 65 3d 22 63 6f 6d 70 61 6e 79 22 3e 27 2b 73 28 65 2e 6c 61 6d 62 64 61 28 6e 75 6c 6c 21 3d 28 6c 3d 6e 75 6c 6c 21 3d 74 3f 63 28 74 2c 22 53 69 6d 70 6c 65 42 72 61 6e 64 69 6e 67 22 29 3a 74 29 3f 63 28 6c 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 Data Ascii: :function(e,t,a,o,i){var l,s=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return' <template name="company">'+s(e.lambda(null!=(l=null!=t?c(t,"SimpleBranding"):t)?c(l,"companyName
2024-10-23 22:50:49 UTC	4344	IN	Data Raw: 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 27 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 5f 74 79 70 65 22 20 76 61 6c 75 65 3d 22 27 2b 65 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 28 65 2e 6c 61 6d 62 64 61 28 6e 75 6c 6c 21 3d 74 3f 6f 28 74 2c 22 6d 6f 64 61 6c 4d 78 66 6f 72 6d 22 29 3a 74 2c 74 29 29 2b 27 22 3e 5c 6e 27 7d 2c 36 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 65 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 Data Ascii: e,t))return e[t]};return' <input type="hidden" name="form_type" value="'+e.escapeExpression(e.lambda(null!=t?o(t,"modalMxform"):t,t))+'">\n'},61:function(e,t,n,a,r){var o,i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))re
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 39 2c 63 6f 6c 75 6d 6e 3a 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 31 35 31 2c 63 6f 6c 75 6d 6e 3a 39 7d 7d 7d 29 29 3f 6c 3a 22 22 29 2b 28 6e 75 6c 6c 21 3d 28 6c 3d 70 28 61 2c 22 69 66 22 29 2e 63 61 6c 6c 28 75 2c 6e 75 6c 6c 21 3d 74 3f 70 28 74 2c 22 69 6e 74 65 72 6e 61 6c 52 6f 75 74 65 45 6e 64 70 6f 69 6e 74 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 34 33 2c 69 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 6e 6f 6f 70 2c 64 61 74 61 3a 69 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 6e 65 3a 31 35 32 2c 63 6f 6c 75 6d 6e 3a 32 7d 2c 65 6e 64 3a 7b 6c 69 6e 65 3a 31 35 34 2c 63 6f 6c 75 6d 6e 3a 39 7d 7d 7d 29 29 3f 6c 3a 22 22 29 2b 27 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 Data Ascii: 9,column:2},end:{line:151,column:9}}}))?l:"")+(null!=(l=p(a,"if").call(u,null!=t?p(t,"internalRouteEndpoint"):t,{name:"if",hash:{},fn:e.program(43,i,0),inverse:e.noop,data:i,loc:{start:{line:152,column:2},end:{line:154,column:9}}}))?l:"")+' <div class="i
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 20 65 5b 74 5d 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 6f 3d 69 28 6e 2c 22 69 66 22 29 2e 63 61 6c 6c 28 6e 75 6c 6c 21 3d 74 3f 74 3a 65 2e 6e 75 6c 6c 43 6f 6e 74 65 78 74 7c 7c 7b 7d 2c 6e 75 6c 6c 21 3d 74 3f 69 28 74 2c 22 75 73 65 4c 69 73 74 69 6e 67 53 6f 6c 64 50 65 6e 64 69 6e 67 43 6f 6e 6e 65 63 74 48 65 61 64 65 72 22 29 3a 74 2c 7b 6e 61 6d 65 3a 22 69 66 22 2c 68 61 73 68 3a 7b 7d 2c 66 6e 3a 65 2e 70 72 6f 67 72 61 6d 28 36 2c 72 2c 30 29 2c 69 6e 76 65 72 73 65 3a 65 2e 70 72 6f 67 72 61 6d 28 31 34 2c 72 2c 30 29 2c 64 61 74 61 3a 72 2c 6c 6f 63 3a 7b 73 74 61 72 74 3a 7b 6c 69 Data Ascii: if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return null!=(o=i(n,"if").call(null!=t?t:e.nullContext\|\|{},null!=t?i(t,"useListingSoldPendingConnectHeader"):t,{name:"if",hash:{},fn:e.program(6,r,0),inverse:e.program(14,r,0),data:r,loc:{start:{li
2024-10-23 22:50:50 UTC	16384	IN	Data Raw: 61 75 6c 74 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 61 2c 72 3d 6e 28 32 29 2c 6f 3d 28 61 3d 72 29 26 26 61 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 61 3a 7b 64 65 66 61 75 6c 74 3a 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 73 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 74 68 69 73 2e 61 63 63 65 70 74 52 65 71 75 69 72 65 64 28 65 2c 22 70 61 74 68 22 29 2c 74 68 69 73 2e 61 63 63 65 70 74 41 72 72 61 79 28 65 2e 70 61 72 61 6d 73 29 2c 74 68 69 73 2e 61 63 63 65 70 74 4b 65 79 28 65 2c 22 68 61 73 68 22 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ault=a,e.exports=t.default},function(e,t,n){"use strict";t.__esModule=!0;var a,r=n(2),o=(a=r)&&a.__esModule?a:{default:a};function i(){this.parents=[]}function l(e){this.acceptRequired(e,"path"),this.acceptArray(e.params),this.acceptKey(e,"hash")}function

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.10	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225049Z-16849878b787sbpl0sv29sm89s00000006xg00000000fzve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.10	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:49 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225049Z-16849878b78mhkkf6kbvry07q000000006rg00000000g6k4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.10	49849	18.198.218.82	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	827	OUT	GET /location?rapidapi-key=mKTYRiJxjxmshhou6VAm18RBVSJkp1eyJLYjsn6w8rRmBQPjDW&callback=jQuery3710923492156920481_1729723842526&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842527 HTTP/1.1 Host: telize-v1.p.rapidapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:50 UTC	489	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: application/json; charset=utf-8 Content-Length: 399 Connection: close Cache-Control: no-cache Access-Control-Allow-Origin: * X-RateLimit-requests-Limit: 100000 X-RateLimit-requests-Remaining: 50911 X-RateLimit-requests-Reset: 62209 Server: RapidAPI-1.2.8 X-RapidAPI-Version: 1.2.8 X-RapidAPI-Region: AWS - eu-central-1 X-RapidAPI-Request-Id: 936fec5ee1a9a30ff661529b20b89890334702c683a9686e5629d984f27e4d2b
2024-10-23 22:50:50 UTC	399	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 36 28 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 38 33 34 2c 22 63 69 74 79 22 3a 22 44 61 6c 6c 61 73 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 61 73 6e 22 3a 38 31 30 30 2c 22 6f 66 66 73 65 74 22 3a 2d 31 38 30 30 30 2c 22 72 65 67 69 6f 6e 22 3a 22 54 65 78 61 73 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 36 37 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 Data Ascii: jQuery3710923492156920481_1729723842526({"is_in_european_union":false,"longitude":-96.8834,"city":"Dallas","timezone":"America\/Chicago","asn":8100,"offset":-18000,"region":"Texas","latitude":32.8167,"organization":"QuadraNet Enterprises LLC","country_cod

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.10	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:49 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225049Z-15b8d89586fqckbz0ssbuzzp1n00000001ag000000009y37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.10	49865	216.58.212.142	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	714	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:50 UTC	1645	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Wed, 23 Oct 2024 22:50:50 GMT Date: Wed, 23 Oct 2024 22:50:50 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Content-Security-Policy: require-trusted-types-for 'script' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:50 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 61 36 32 64 38 33 36 64 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/a62d836d\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-10-23 22:50:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.10	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225050Z-r197bdfb6b4kq4j5t834fh90qn0000000a00000000004ure x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.10	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225050Z-15b8d89586fs9clcgrr6f2d6vg00000000w0000000006pvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.10	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225050Z-16849878b78dghrpt8v731n7r400000006sg000000009yf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.10	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 7acd244f-d01e-002b-55f2-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225050Z-r197bdfb6b4ld6jc5asqwvvz0w00000000vg000000006dwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.10	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:50 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 5441351c-201e-000c-2bf5-2479c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225050Z-r197bdfb6b4qpk6v9629ad4b5s0000000bk00000000013w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:50 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.10	49866	13.32.121.5	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	537	OUT	GET /beacon.js HTTP/1.1 Host: disutgh7q0ncc.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 255145 Connection: close Last-Modified: Wed, 17 Jul 2024 22:40:45 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 23 Oct 2024 22:50:52 GMT ETag: "b38e14df288cf76d4a8d2bdee11a2038" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 5fa65194b963365c20fbd28444032cfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: YlFThI2jrJ0UwvqqhuzUa3dFP-JItBCTMyCNlV4UR5QnKEPalpD9pA==
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 57 6f 6f 74 72 69 63 53 75 72 76 65 79 3d 77 69 6e 64 6f 77 2e 57 6f 6f 74 72 69 63 53 75 72 76 65 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6f 2c 74 2c 65 29 7b 69 66 28 34 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 64 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 69 6e 76 61 6c 69 64 20 61 65 73 20 62 6c 6f 63 6b 20 73 69 7a 65 22 29 3b 76 61 72 20 72 3d 6f 2e 62 5b 65 5d 2c 69 3d 74 5b 30 5d 5e 72 5b 30 5d 2c 6e 3d 74 5b 65 3f 33 3a 31 5d 5e 72 5b 31 5d 2c 63 3d 74 5b 32 5d 5e 72 5b 32 5d 3b 74 3d 74 5b 65 3f 31 3a 33 5d 5e 72 5b 33 5d 3b 76 61 72 20 61 2c 6c 2c 73 2c 75 2c 6d 3d 72 2e 6c 65 6e 67 74 68 2f 34 2d 32 2c 70 3d 34 Data Ascii: !function(){window.WootricSurvey=window.WootricSurvey\|\|function(){function o(o,t,e){if(4!==t.length)throw new d.exception.invalid("invalid aes block size");var r=o.b[e],i=t[0]^r[0],n=t[e?3:1]^r[1],c=t[2]^r[2];t=t[e?1:3]^r[3];var a,l,s,u,m=r.length/4-2,p=4
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 74 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 74 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 65 3d 2b 6f 2b 28 6f 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 65 26 26 65 3c 74 3f 5b 74 68 69 73 5b 65 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: t)}))},slice:function(){return this.pushStack(to.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(o){var t=this.length,e=+o+(o<0?t:0);return this.pushStack(0<=e&&e<t?[this[e]]:[])},end:function(){
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 6e 5b 4d 5d 3f 6e 28 65 29 3a 31 3c 6e 2e 6c 65 6e 67 74 68 3f 28 69 3d 5b 6f 2c 6f 2c 22 22 2c 65 5d 2c 76 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 72 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 28 6f 2c 65 29 2c 63 3d 69 2e 6c 65 6e 67 74 68 3b 63 2d 2d 3b 29 6f 5b 72 3d 4b 28 6f 2c 69 5b 63 5d 29 5d 3d 21 28 74 5b 72 5d 3d 69 5b 63 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 30 2c 69 29 7d 29 3a 6e 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 72 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 74 3d 5b 5d 2c 65 3d 5b 5d 2c 69 3d 6b 28 6f 2e 72 65 70 6c 61 63 65 Data Ascii: eturn n[M]?n(e):1<n.length?(i=[o,o,"",e],v.setFilters.hasOwnProperty(o.toLowerCase())?r(function(o,t){for(var r,i=n(o,e),c=i.length;c--;)o[r=K(o,i[c])]=!(t[r]=i[c])}):function(o){return n(o,0,i)}):n}},pseudos:{not:r(function(o){var t=[],e=[],i=k(o.replace
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 29 2c 6f 3d 6f 7c 7c 22 66 78 22 3b 63 2d 2d 3b 29 28 65 3d 44 6f 2e 67 65 74 28 6e 5b 63 5d 2c 6f 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 29 29 26 26 65 2e 65 6d 70 74 79 26 26 28 72 2b 2b 2c 65 2e 65 6d 70 74 79 2e 61 64 64 28 61 29 29 3b 72 65 74 75 72 6e 20 61 28 29 2c 69 2e 70 72 6f 6d 69 73 65 28 74 29 7d 7d 29 3b 76 61 72 20 42 6f 3d 2f 5b 2b 2d 5d 3f 28 3f 3a 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 49 6f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 42 6f 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 52 6f 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 48 6f 3d 5a 2e 64 6f 63 Data Ascii: ),o=o\|\|"fx";c--;)(e=Do.get(n[c],o+"queueHooks"))&&e.empty&&(r++,e.empty.add(a));return a(),i.promise(t)}});var Bo=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,Io=new RegExp("^(?:([+-])=\|)("+Bo+")([a-z%])$","i"),Ro=["Top","Right","Bottom","Left"],Ho=Z.doc
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 7c 68 69 64 65 29 24 2f 2c 78 74 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 3b 68 6f 2e 41 6e 69 6d 61 74 69 6f 6e 3d 68 6f 2e 65 78 74 65 6e 64 28 55 2c 7b 74 77 65 65 6e 65 72 73 3a 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 6f 2c 74 29 3b 72 65 74 75 72 6e 20 67 28 65 2e 65 6c 65 6d 2c 6f 2c 49 6f 2e 65 78 65 63 28 74 29 2c 65 29 2c 65 7d 5d 7d 2c 74 77 65 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 29 7b 6d 6f 28 6f 29 3f 28 74 3d 6f 2c 6f 3d 5b 22 2a 22 5d 29 3a 6f 3d 6f 2e 6d 61 74 63 68 28 53 6f 29 3b 66 6f 72 28 76 61 72 20 65 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 65 3d 6f 5b 72 5d 2c 55 2e 74 77 65 65 6e 65 72 73 5b 65 5d Data Ascii: \|hide)$/,xt=/queueHooks$/;ho.Animation=ho.extend(U,{tweeners:{"":[function(o,t){var e=this.createTween(o,t);return g(e.elem,o,Io.exec(t),e),e}]},tweener:function(o,t){mo(o)?(t=o,o=[""]):o=o.match(So);for(var e,r=0,i=o.length;r<i;r++)e=o[r],U.tweeners[e]
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 6f 29 7b 76 61 72 20 74 3d 6f 7c 7c 78 3b 72 65 74 75 72 6e 20 69 26 26 69 2e 61 62 6f 72 74 28 74 29 2c 72 28 30 2c 74 29 2c 74 68 69 73 7d 7d 3b 69 66 28 67 2e 70 72 6f 6d 69 73 65 28 6b 29 2c 66 2e 75 72 6c 3d 28 28 74 7c 7c 66 2e 75 72 6c 7c 7c 6a 74 2e 68 72 65 66 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 57 74 2c 6a 74 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 29 2c 66 2e 74 79 70 65 3d 65 2e 6d 65 74 68 6f 64 7c 7c 65 2e 74 79 70 65 7c 7c 66 2e 6d 65 74 68 6f 64 7c 7c 66 2e 74 79 70 65 2c 66 2e 64 61 74 61 54 79 70 65 73 3d 28 66 2e 64 61 74 61 54 79 70 65 7c 7c 22 2a 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 53 6f 29 7c 7c 5b 22 22 5d 2c 6e 75 6c 6c 3d 3d 66 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 7b 73 3d Data Ascii: tion(o){var t=o\|\|x;return i&&i.abort(t),r(0,t),this}};if(g.promise(k),f.url=((t\|\|f.url\|\|jt.href)+"").replace(Wt,jt.protocol+"//"),f.type=e.method\|\|e.type\|\|f.method\|\|f.type,f.dataTypes=(f.dataType\|\|"*").toLowerCase().match(So)\|\|[""],null==f.crossDomain){s=
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 72 3e 3e 3e 6e 29 2c 61 3d 72 3c 3c 33 32 2d 6e 29 3a 61 5e 3d 72 3c 3c 33 32 2d 28 6e 2b 3d 36 29 7d 72 65 74 75 72 6e 20 35 36 26 6e 26 26 69 2e 70 75 73 68 28 64 2e 62 69 74 41 72 72 61 79 2e 70 61 72 74 69 61 6c 28 35 36 26 6e 2c 61 2c 31 29 29 2c 69 7d 7d 2c 64 2e 63 6f 64 65 63 2e 62 61 73 65 36 34 75 72 6c 3d 7b 66 72 6f 6d 42 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 64 2e 63 6f 64 65 63 2e 62 61 73 65 36 34 2e 66 72 6f 6d 42 69 74 73 28 6f 2c 31 2c 31 29 7d 2c 74 6f 42 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 64 2e 63 6f 64 65 63 2e 62 61 73 65 36 34 2e 74 6f 42 69 74 73 28 6f 2c 31 29 7d 7d 2c 64 2e 68 61 73 68 2e 73 68 61 32 35 36 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 68 69 73 2e 62 5b Data Ascii: r>>>n),a=r<<32-n):a^=r<<32-(n+=6)}return 56&n&&i.push(d.bitArray.partial(56&n,a,1)),i}},d.codec.base64url={fromBits:function(o){return d.codec.base64.fromBits(o,1,1)},toBits:function(o){return d.codec.base64.toBits(o,1)}},d.hash.sha256=function(o){this.b[
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 74 73 28 65 5b 34 5d 29 3a 75 6e 65 73 63 61 70 65 28 65 5b 34 5d 29 3a 6e 75 6c 6c 21 3d 65 5b 35 5d 26 26 28 72 5b 65 5b 32 5d 5d 3d 22 74 72 75 65 22 3d 3d 3d 65 5b 35 5d 29 7d 72 65 74 75 72 6e 20 72 7d 2c 67 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 29 7b 69 66 28 65 26 26 76 6f 69 64 20 30 21 3d 3d 6f 5b 72 5d 26 26 6f 5b 72 5d 21 3d 3d 74 5b 72 5d 29 74 68 72 6f 77 20 6e 65 77 20 64 2e 65 78 63 65 70 74 69 6f 6e 2e 69 6e 76 61 6c 69 64 28 22 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 20 6f 76 65 Data Ascii: ts(e[4]):unescape(e[4]):null!=e[5]&&(r[e[2]]="true"===e[5])}return r},g:function(o,t,e){if(void 0===o&&(o={}),void 0===t)return o;for(var r in t)if(t.hasOwnProperty(r)){if(e&&void 0!==o[r]&&o[r]!==t[r])throw new d.exception.invalid("required parameter ove
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 6d 6f 64 61 6c 2e 77 6f 6f 74 72 69 63 2d 6d 6f 64 61 6c 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 77 6f 6f 74 72 69 63 2d 6d 6f 64 61 6c 20 2e 77 6f 6f 74 72 69 63 2d 6d 6f 64 61 6c 2d 63 6f 6c 6c 61 70 73 65 64 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 72 67 69 6e 20 2e 33 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 20 2e 33 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 70 61 64 64 69 6e 67 20 2e 33 73 20 65 61 73 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 72 67 69 6e 20 2e 33 73 20 65 61 73 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 Data Ascii: modal.wootric-modal-hidden{display:none !important}#wootric-modal .wootric-modal-collapsed{-moz-transition:margin .3s ease;-moz-transition:max-height .3s ease;-moz-transition:padding .3s ease;-webkit-transition:margin .3s ease;-webkit-transition:max-heigh
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 6c 2d 7a 6f 6f 6d 65 64 2e 63 6f 6d 70 61 63 74 20 23 77 6f 6f 74 72 69 63 2d 73 68 61 72 65 2e 77 6f 6f 74 72 69 63 2d 6d 6f 64 61 6c 2d 63 6f 6c 6c 61 70 73 65 64 7b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 6f 6f 74 72 69 63 2d 6d 6f 62 69 6c 65 2d 6d 6f 64 61 6c 2d 7a 6f 6f 6d 65 64 2e 63 6f 6d 70 61 63 74 20 23 77 6f 6f 74 72 69 63 2d 74 68 61 6e 6b 73 7b 6d 61 72 67 69 6e 3a 32 2e 35 65 6d 20 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 6f 6f 74 72 69 63 2d 6d 6f 62 69 6c 65 2d 6d 6f 64 61 6c 2d 7a 6f 6f 6d 65 64 2e 63 6f 6d 70 61 63 74 20 23 77 6f 6f 74 72 69 63 2d 66 75 6c 6c 73 63 6f 72 65 20 2e 77 6f 6f 74 72 69 63 2d 66 6f 6c 6c 6f 77 75 70 2c 2e 77 6f 6f 74 72 69 63 2d 6d 6f 62 69 6c Data Ascii: l-zoomed.compact #wootric-share.wootric-modal-collapsed{margin:0 !important}.wootric-mobile-modal-zoomed.compact #wootric-thanks{margin:2.5em 0 0 !important;padding:0}.wootric-mobile-modal-zoomed.compact #wootric-fullscore .wootric-followup,.wootric-mobil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.10	49873	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	757	OUT	GET /service/v1/branding/bypass/google/1234567/google_bypass.js?send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842528 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	287	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: application/javascript content-length: 33948 server: nginx last-modified: Fri, 23 Feb 2024 00:08:39 GMT etag: "65d7e207-849c" accept-ranges: bytes x-app-server: wms_svc_branding/internal-k8s connection: close
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 2f 2f 53 61 76 65 64 20 2d 20 31 38 30 30 20 6c 69 6e 65 73 20 6f 6e 20 3a 20 73 76 63 31 36 2d 70 72 20 3a 20 32 30 32 34 2d 30 31 2d 31 36 20 31 39 3a 33 39 3a 31 31 20 2d 30 38 30 30 0a 76 61 72 20 67 6f 6f 67 6c 65 5f 62 79 70 61 73 73 20 3d 20 5b 0d 0a 20 20 7b 0d 0a 20 20 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 37 2e 35 39 38 34 35 35 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 31 34 36 30 38 32 34 30 30 30 30 30 30 31 2c 0d 0a 20 20 20 20 6e 61 6d 65 3a 20 22 4c 61 6b 65 20 48 69 6c 6c 73 2c 20 42 65 6c 6c 65 76 75 65 2c 20 57 41 22 2c 0d 0a 20 20 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 20 20 7a 6f 6f 6d 3a 20 2d 31 2c 0d 0a 20 20 20 20 62 6f 75 6e 64 73 Data Ascii: //Saved - 1800 lines on : svc16-pr : 2024-01-16 19:39:11 -0800var google_bypass = [ { geospatial: true, lat: 47.5984551, lon: -122.14608240000001, name: "Lake Hills, Bellevue, WA", type: "Solutions", zoom: -1, bounds
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 61 6c 64 2d 4a 6f 68 6e 73 6f 6e 20 43 72 65 65 6b 2c 20 50 6f 72 74 6c 61 6e 64 2c 20 4f 52 22 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 35 2e 34 35 37 31 37 37 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 36 32 36 31 33 30 33 2c 0d 0a 20 20 20 20 74 79 70 65 3a 20 22 4e 65 69 67 68 62 6f 72 68 6f 6f 64 22 2c 0d 0a 20 20 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 7a 6f 6f 6d 3a 20 2d 31 0d 0a 20 20 7d 2c 0d 0a 20 20 7b 0d 0a 20 20 20 20 6e 61 6d 65 3a 20 22 41 72 64 65 6e 77 61 6c 64 20 4a 6f 68 6e 73 6f 6e 20 43 72 65 65 6b 2c 20 50 6f 72 74 6c 61 6e 64 2c 20 4f 52 22 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 35 2e 34 35 37 31 37 37 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 36 32 36 31 33 30 33 2c 0d 0a 20 Data Ascii: ald-Johnson Creek, Portland, OR", lat: 45.4571771, lon: -122.6261303, type: "Neighborhood", geospatial: true, zoom: -1 }, { name: "Ardenwald Johnson Creek, Portland, OR", lat: 45.4571771, lon: -122.6261303,
2024-10-23 22:50:51 UTC	1180	IN	Data Raw: 65 6e 69 78 2c 20 41 5a 2c 20 55 53 41 22 2c 0d 0a 20 20 6c 61 74 3a 20 33 33 2e 34 38 30 34 36 37 32 2c 0d 0a 20 20 6c 6f 6e 3a 20 2d 31 31 32 2e 30 37 37 34 34 35 30 39 39 39 39 39 39 38 2c 0d 0a 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 7a 6f 6f 6d 3a 20 2d 31 0d 0a 7d 2c 0d 0a 7b 0d 0a 20 20 6e 61 6d 65 3a 20 22 45 73 74 72 65 6c 6c 61 20 56 69 6c 6c 61 67 65 2c 20 50 68 6f 65 6e 69 78 2c 20 41 5a 2c 20 55 53 41 22 2c 0d 0a 20 20 6c 61 74 3a 20 33 33 2e 34 33 30 34 30 32 36 2c 0d 0a 20 20 6c 6f 6e 3a 20 2d 31 31 32 2e 32 30 32 36 33 34 36 39 39 39 39 39 39 38 2c 0d 0a 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 67 65 6f 73 70 61 74 Data Ascii: enix, AZ, USA", lat: 33.4804672, lon: -112.07744509999998, type: "Solutions", geospatial: true, zoom: -1},{ name: "Estrella Village, Phoenix, AZ, USA", lat: 33.4304026, lon: -112.20263469999998, type: "Solutions", geospat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.10	49874	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	379	OUT	GET /service/v1/auth/images/ajax-loader.gif HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	268	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: image/gif content-length: 3951 server: nginx last-modified: Mon, 15 Jul 2024 18:05:41 GMT etag: "669564f5-f6f" accept-ranges: bytes x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:51 UTC	3951	IN	Data Raw: 47 49 46 38 39 61 80 00 0f 00 f2 00 00 ed ed ed 44 44 44 c6 c6 c6 ba ba ba 6f 6f 6f 44 44 44 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 80 00 0f 00 00 03 e7 08 b2 0b fe ac 3d 17 c5 a4 f1 aa 7c ab f6 1d 37 81 a3 08 99 18 b3 91 ab 59 49 a9 fb 96 ec 6b 9d f5 8c cb b9 dd f3 40 d5 4e 18 23 b6 8c 36 5a 10 76 64 fa 74 45 27 b4 79 8b 56 a9 4a e4 34 39 94 fe 9e 57 ae 35 eb 5d 86 b7 e8 6f 59 0b 5e bb cf 6a b8 99 2c 67 cf bb 3e ba 1e bf 1f f3 ff 7e 81 58 78 62 83 82 85 88 69 77 87 8a 76 0c 03 90 91 03 13 92 91 94 95 93 0f 98 99 0e 9b 97 95 9f 92 a1 96 9a 98 a3 90 a7 9c 00 9b 9e a5 a0 ae a2 b0 a4 9d a6 b2 a8 Data Ascii: GIF89aDDDoooDDD!NETSCAPE2.0!Created with ajaxload.info!,=\|7YIk@N#6ZvdtE'yVJ49W5]oY^j,g>~Xxbiwv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.10	49875	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	616	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842518&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842519 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"1b7519d802cbedb0d2b150e890688bd2" cache-control: max-age=0, private, must-revalidate x-request-id: 1e011322-b86a-40b2-b2d9-c8b82a147cde x-runtime: 0.010357 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:51 UTC	116	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 31 38 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a 30 0d 0a 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842518({"success":false,"error":"No authorization header provided"})0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.10	49877	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	616	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842524&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842525 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"d66b9df4fd2a5cdad8acac0b844c361d" cache-control: max-age=0, private, must-revalidate x-request-id: aa402f2e-8cfb-4532-aff7-eda9ae564f2c x-runtime: 0.009856 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:51 UTC	116	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 34 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a 30 0d 0a 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842524({"success":false,"error":"No authorization header provided"})0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.10	49876	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:50 UTC	616	OUT	GET /service/v1/auth/users/current_web_user.json?&callback=jQuery3710923492156920481_1729723842522&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842523 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx x-xss-protection: 0 x-content-type-options: nosniff p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" etag: W/"c2844ceb1532cdbb02dd282c0811278b" cache-control: max-age=0, private, must-revalidate x-request-id: 760ae1a7-9ac0-4f30-a675-f200647c29e3 x-runtime: 0.010017 x-app-server: wms_svc_auth/internal-k8s connection: close
2024-10-23 22:50:51 UTC	116	IN	Data Raw: 36 39 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 32 28 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 70 72 6f 76 69 64 65 64 22 7d 29 0d 0a 30 0d 0a 0d 0a Data Ascii: 69/**/jQuery3710923492156920481_1729723842522({"success":false,"error":"No authorization header provided"})0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.10	49879	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	638	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=782b628426a895c0dfd7727f0e7fb402 HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1; _ga_GYEG79KM6W=GS1.1.1729723847.1.0.1729723847.0.0.0; _ga=GA1.1.906342610.1729723845
2024-10-23 22:50:51 UTC	495	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:05 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:20 GMT cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:05 GMT vary: Accept-Encoding x-content-type-options: nosniff content-type: application/javascript v-backend: dugout13-pr x-varnish: 240458837 216269975 age: 7305 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes content-length: 18692 x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:51 UTC	998	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-10-23 22:50:51 UTC	10136	IN	Data Raw: 73 2c 61 3d 62 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 61 2d 2d 3b 29 63 3d 62 5b 61 5d 2c 33 3d 3d 3d 28 65 3d 63 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 63 29 3a 31 21 3d 3d 65 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 63 7c 7c 67 2e 74 65 73 74 28 63 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 6d 2e 64 6f 4e 6f 74 50 61 72 73 65 26 26 6d 2e 64 6f 4e 6f 74 50 61 72 73 65 28 63 29 7c 7c 64 28 63 2c 66 29 3b 72 65 74 75 72 6e 20 66 7d 28 64 2c 5b 5d 29 2c 70 3d 6c 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 70 2d 2d 3b 29 7b 66 6f 72 28 65 3d 21 31 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 61 3d 6c 5b 70 5d 2c 74 3d 61 2e Data Ascii: s,a=b.length;for(;a--;)c=b[a],3===(e=c.nodeType)?f.push(c):1!==e\|\|"ownerSVGElement"in c\|\|g.test(c.nodeName.toLowerCase())\|\|m.doNotParse&&m.doNotParse(c)\|\|d(c,f);return f}(d,[]),p=l.length;for(;p--;){for(e=!1,b=document.createDocumentFragment(),a=l[p],t=a.
2024-10-23 22:50:51 UTC	2896	IN	Data Raw: 32 30 34 39 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 61 39 5c 75 32 31 61 61 5c 75 32 33 31 61 5c 75 32 33 31 62 5c 75 32 33 32 38 5c 75 32 33 63 66 5c 75 32 33 65 64 2d 5c 75 32 33 65 66 5c 75 32 33 66 31 5c 75 32 33 66 32 5c 75 32 33 66 38 2d 5c 75 32 33 66 61 5c 75 32 34 63 32 5c 75 32 35 61 61 5c 75 32 35 61 62 5c 75 32 35 62 36 5c 75 32 35 63 30 5c 75 32 35 66 62 2d 5c 75 32 35 66 65 5c 75 32 36 30 30 2d 5c 75 32 36 30 34 5c 75 32 36 30 65 5c 75 32 36 31 31 5c 75 32 36 31 34 5c 75 32 36 31 35 5c 75 32 36 31 38 5c 75 32 36 32 30 5c 75 32 36 32 32 5c 75 32 36 32 33 5c 75 32 36 32 36 5c 75 32 36 32 61 5c 75 32 36 32 65 5c 75 32 36 32 66 5c 75 32 36 33 38 2d 5c 75 32 36 33 61 5c 75 32 36 34 30 5c 75 32 36 34 32 5c 75 32 36 34 Data Ascii: 2049\u2139\u2194-\u2199\u21a9\u21aa\u231a\u231b\u2328\u23cf\u23ed-\u23ef\u23f1\u23f2\u23f8-\u23fa\u24c2\u25aa\u25ab\u25b6\u25c0\u25fb-\u25fe\u2600-\u2604\u260e\u2611\u2614\u2615\u2618\u2620\u2622\u2623\u2626\u262a\u262e\u262f\u2638-\u263a\u2640\u2642\u264
2024-10-23 22:50:51 UTC	4662	IN	Data Raw: 64 64 65 38 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 33 5c 75 64 64 66 61 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 63 5c 75 64 38 33 63 5b 5c 75 64 64 65 62 5c 75 64 64 66 38 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 64 5c 75 64 38 33 63 5c 75 64 64 66 30 7c 5c 75 64 38 33 63 5c 75 64 64 66 65 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 66 39 5d 7c 5c 75 64 38 33 63 5c 75 64 64 66 66 5c 75 64 38 33 63 5b 5c 75 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 5c 75 64 65 33 38 2d 5c 75 64 65 33 61 5c 75 64 65 35 30 5c 75 64 65 35 31 Data Ascii: dde8\uddea\uddec\uddee\uddf3\uddfa]\|\ud83c\uddfc\ud83c[\uddeb\uddf8]\|\ud83c\uddfd\ud83c\uddf0\|\ud83c\uddfe\ud83c[\uddea\uddf9]\|\ud83c\uddff\ud83c[\udde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.10	49880	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	607	OUT	GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1; _ga_GYEG79KM6W=GS1.1.1729723847.1.0.1729723847.0.0.0; _ga=GA1.1.906342610.1729723845
2024-10-23 22:50:51 UTC	459	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 20:49:05 GMT server: Apache last-modified: Tue, 22 Oct 2024 18:40:18 GMT content-length: 15238 cache-control: max-age=86400 expires: Thu, 24 Oct 2024 20:49:05 GMT x-content-type-options: nosniff content-type: image/gif v-backend: dugout12-pr x-varnish: 655524010 622036446 age: 7305 via: 1.1 varnish (Varnish/6.5) accept-ranges: bytes x-app-server: varnish_dugout/dugout-varnish21-pr connection: close
2024-10-23 22:50:51 UTC	2482	IN	Data Raw: 47 49 46 38 39 61 a0 01 1a 00 c4 00 00 fb fb fb f7 f7 f7 f3 f3 f3 ef ef ef ea ea ea e6 e6 e6 e2 e2 e2 de de de da da da d6 d6 d6 d2 d2 d2 ce ce ce ca ca ca c5 c5 c5 c1 c1 c1 bd bd bd b9 b9 b9 b5 b5 b5 b1 b1 b1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff e0 d1 44 52 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a7 07 01 c0 20 01 8f c8 a4 72 c9 6c 3a 9f 50 27 a4 40 8a 30 16 d8 ac 16 db 28 45 20 e0 b0 58 5c 7a 6c cf 58 86 69 cc 0e 97 d1 e7 ae e4 db 66 bf e1 5a 75 a9 6e 97 98 f1 59 72 74 7c 6e 7e 80 59 7a 12 84 64 86 87 0b 82 8b 85 7f 87 89 91 60 77 87 90 96 Data Ascii: GIF89a!NETSCAPE2.0!,DRihlp,tmx\| rl:P'@0(E X\zlXifZunYrt\|n~Yzd`w
2024-10-23 22:50:51 UTC	5792	IN	Data Raw: 19 67 21 7e e6 79 e5 98 23 f6 39 67 5e 74 16 59 12 a3 93 dc a9 e8 a4 2e 36 60 69 93 44 62 8a a2 a6 6b 02 2a e9 a1 02 1a b2 e9 9b a3 52 aa c7 a9 85 12 e0 29 a2 a0 46 da 29 a9 17 ae 1a aa 09 56 be 2a 65 ac 97 d2 4a a3 a9 b7 96 90 ab af 3a 02 2b ab ab c4 36 6a 6c af aa 2e 5b de 0a 00 44 0b 80 00 57 24 c0 c2 ff 01 d8 22 70 85 01 2c 48 1b 80 02 0b fc 69 02 b6 13 68 bb 00 b7 2a 48 3b 6d b5 d7 66 bb 6d b7 d1 7e 1b 6e bb e5 be 9b ae b4 d4 2e 60 ed 0a e4 9a 8b ee bd 00 c8 2b 6e 09 fd da 9b 82 ba f9 ee ab 42 c1 e7 c2 1b 30 b8 03 93 c0 f0 bf 28 20 cc 2e bf ee 36 0c 6d bc 10 d3 eb ef c6 d1 26 ec b1 c1 15 e3 7b f1 c2 19 53 fc 82 ba 09 cc 8b 31 b6 1d 83 0c 80 08 e4 8d 8b ed 01 31 03 0c 40 cb 11 4f 70 33 ce 2e eb 4c 73 bb 30 07 7d b0 b4 3c 13 0d 74 cf ea 0e fd f2 d2 0e Data Ascii: g!~y#9g^tY.6`iDbkR)F)VeJ:+6jl.[DW$"p,Hih*H;mfm~n.`+nB0( .6m&{S11@Op3.Ls0}<t
2024-10-23 22:50:51 UTC	5792	IN	Data Raw: 2d b3 f7 37 1e 6e f3 8a e6 82 25 37 2f 97 36 70 42 ac 7e b5 ac e0 2d 07 98 ce fe 89 f3 89 dd 2c a7 18 cf 29 4f 4d 92 91 9d a3 c4 e4 2a 4d 79 4f 36 a6 33 9e 0c cb e5 32 a5 16 4c 6a 0e 53 90 04 ad a6 30 9b 89 50 4c 42 b3 8e d7 7c 68 05 13 7a d0 85 3a 70 a0 0e 45 66 36 23 aa 51 37 52 81 94 a1 32 ec da b3 4a a0 00 27 ce f3 7d de 2c a3 39 e9 d7 c5 95 72 51 8a f9 04 a2 19 fb 79 cc 98 b6 f4 a4 2f d5 a2 4b 55 39 45 f0 9d b2 a7 ee f3 9f 4a 71 fa d3 99 a6 74 80 63 2a a9 2e 8b a9 4c 6b 36 d5 a2 02 75 2a 2f 0d 0a 52 aa 5e 54 aa 05 7d e4 54 b5 9a d5 64 6e d5 ab 5d dd 28 09 69 f4 98 26 98 f5 ac 68 4d ab 5a d7 ca d6 b6 26 20 66 6d 8d ab 5c e7 4a d7 ba da 75 ad 10 60 c0 04 42 00 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff 20 50 4c 64 69 9e 68 aa ae 6c Data Ascii: -7n%7/6pB~-,)OMMyO632LjS0PLB\|hz:pEf6#Q7R2J'},9rQy/KU9EJqtc.Lk6u*/R^T}Tdn](i&hMZ& fm\Ju`B!, PLdihl
2024-10-23 22:50:51 UTC	1172	IN	Data Raw: b6 68 d5 9f 59 e7 36 b1 bb b4 e6 df b6 63 14 58 ae a0 35 20 07 8b 59 2c 2f 30 ba 0d 13 e8 b3 51 4c 6f 3e bc c4 15 ec d2 97 57 37 03 7e c5 76 e7 95 16 94 57 31 7d fc f3 e8 e6 99 a3 47 f1 1d 3e 7b f1 f3 4f d4 cf 7e e2 7c 77 12 fb 85 47 5d 7e 26 04 18 5f 01 dc 59 a7 9e ff 7d 29 b4 47 a0 77 d7 31 08 03 01 04 14 b0 0e 4d fa 1d b6 8e 29 2a 50 48 80 01 f6 28 b8 21 0b 14 5a e8 00 86 05 6a e8 00 87 29 78 08 22 7f 19 4e 30 e2 0a 25 5e 28 e2 8a 34 52 f8 62 0b df e1 98 a3 89 28 42 28 a3 8f 2d ea 18 22 79 44 16 09 e4 8d 2c a2 e0 e2 91 cf 25 e9 64 85 36 22 d9 e4 09 4f c2 98 e2 90 57 ba e0 e1 90 0a 36 70 22 89 14 82 b9 c8 98 39 12 60 26 20 62 06 49 c2 97 50 d2 67 09 9a 1d 96 19 67 86 58 d0 59 a4 9a 77 a6 98 a7 9b 23 c0 a9 25 80 73 02 3a 81 a0 61 ea 39 25 9f 83 8e 50 87 Data Ascii: hY6cX5 Y,/0QLo>W7~vW1}G>{O~\|wG]~&_Y})Gw1M)*PH(!Zj)x"N0%^(4Rb(B(-"yD,%d6"OW6p"9`& bIPggXYw#%s:a9%P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.10	49881	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	689	OUT	GET /service/v1/branding/company?callback=jQuery3710923492156920481_1729723842520&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&company_uuid=4216987&agent_uuid=b5555792-2a81-434a-ba98-10845eabb0dc&office_uuid=12153963&_=1729723842521 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	806	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:51 GMT content-type: text/javascript; charset=utf-8 transfer-encoding: chunked server: nginx status: 200 OK x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-headers: FROM_APP, FROM-APP cache-control: max-age=360, private etag: W/"8cb0ebc7da7bfd438af532eb27a69323" x-request-id: 486d73ef-39e3-4c1b-91ec-1e567cef0c98 x-runtime: 0.034173 x-app-server: wms_svc_branding/internal-k8s connection: close
2024-10-23 22:50:51 UTC	15578	IN	Data Raw: 37 44 32 43 0d 0a 2f 2a 2a 2f 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 30 28 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 72 65 73 75 6c 74 5f 74 79 70 65 22 3a 22 48 61 73 68 22 2c 22 72 65 73 75 6c 74 5f 6c 69 73 74 22 3a 5b 7b 22 66 6f 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 66 6f 6e 74 5f 31 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 66 6f 6e 74 5f 32 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 62 62 62 62 62 62 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 72 69 6d 61 72 79 5f 62 6f 64 79 5f 66 6f 6e 74 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 66 32 62 35 32 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 73 65 63 Data Ascii: 7D2C/**/jQuery3710923492156920481_1729723842520({"status":"success","data":{"result_type":"Hash","result_list":[{"fonts":[{"name":"font_1","color":"#ffffff"},{"name":"font_2","color":"#bbbbbb"},{"name":"primary_body_font","color":"#0f2b52"},{"name":"sec
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 22 3a 22 22 2c 22 62 75 74 74 6f 6e 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 68 61 74 5f 61 6c 6c 6f 77 65 64 5f 64 61 79 73 22 3a 5b 5d 2c 22 63 6d 61 5f 64 65 66 61 75 6c 74 5f 73 74 79 6c 65 22 3a 22 6d 6f 64 65 72 6e 22 2c 22 63 6d 61 5f 76 69 65 77 5f 75 72 6c 5f 72 6f 6f 74 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 65 73 65 6e 74 2e 63 62 6d 6f 78 69 2e 63 6f 6d 22 2c 22 63 72 6d 5f 70 72 69 6d 61 72 79 5f 63 6f 6c 6f 72 22 3a 22 23 30 31 32 31 36 39 22 2c 22 65 63 6f 6d 6d 5f 61 6c 6c 6f 77 5f 70 6f 72 63 68 22 3a 22 66 61 6c 73 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 70 61 67 65 5f 75 72 6c 22 3a 22 22 2c 22 66 6f 6e 74 5f 66 61 63 65 5f 70 72 69 6d 61 72 79 22 3a 22 27 52 6f 62 6f 74 6f 27 2c 20 27 48 65 6c 76 65 74 Data Ascii: ":"","button_font_color":"#ffffff","chat_allowed_days":[],"cma_default_style":"modern","cma_view_url_root":"https://present.cbmoxi.com","crm_primary_color":"#012169","ecomm_allow_porch":"false","facebook_page_url":"","font_face_primary":"'Roboto', 'Helvet
2024-10-23 22:50:51 UTC	90	IN	Data Raw: 22 53 74 2e 20 4c 6f 75 69 73 22 2c 22 75 75 69 64 22 3a 22 36 34 31 35 66 66 32 30 2d 39 33 65 65 2d 30 31 33 35 2d 38 32 33 63 2d 30 30 35 30 35 36 39 63 35 34 61 64 22 2c 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 63 6f 70 79 72 69 67 68 74 22 3a 22 5c 75 30 0d 0a Data Ascii: "St. Louis","uuid":"6415ff20-93ee-0135-823c-0050569c54ad","active":true,"copyright":"\u0
2024-10-23 22:50:51 UTC	16360	IN	Data Raw: 33 46 45 30 0d 0a 30 32 36 63 6f 70 79 3b 20 23 23 59 45 41 52 23 23 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 47 75 6e 64 61 6b 65 72 22 2c 22 65 6e 74 69 74 79 5f 70 61 6c 65 74 74 65 5f 61 63 6c 22 3a 5b 7b 22 2a 22 3a 22 64 65 6e 79 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 3a 7b 22 31 30 30 30 37 37 32 38 22 3a 22 61 6c 6c 6f 77 22 7d 7d 5d 2c 22 69 6d 61 67 65 5f 63 6d 61 5f 70 64 66 5f 6c 6f 67 6f 5f 63 6f 76 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 6c 6f 75 64 2e 72 65 61 6c 6f 67 79 70 72 6f 64 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 69 65 73 2f 43 42 52 2f 50 30 30 35 30 30 30 30 30 46 44 64 71 51 57 33 67 39 69 6a 49 35 79 4b 45 44 69 72 56 77 30 6f 30 6c 38 76 77 71 42 75 2f 6c 6f 67 6f 73 2f 50 30 31 36 30 30 Data Ascii: 3FE0026copy; ##YEAR## Coldwell Banker Gundaker","entity_palette_acl":[{"*":"deny","organizations":{"10007728":"allow"}}],"image_cma_pdf_logo_cover":"https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 36 30 32 36 0d 0a 65 6e 74 69 61 6c 20 42 72 6f 6b 65 72 61 67 65 20 66 75 6c 6c 79 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 69 6e 63 69 70 6c 65 73 20 6f 66 20 74 68 65 20 46 61 69 72 20 48 6f 75 73 69 6e 67 20 41 63 74 20 61 6e 64 20 74 68 65 20 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 41 63 74 2e 20 4f 77 6e 65 64 20 62 79 20 61 20 73 75 62 73 69 64 69 61 72 79 20 6f 66 20 4e 52 54 20 4c 4c 43 2e 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 61 6e 64 20 74 68 65 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 4c 6f 67 6f 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 73 65 72 76 69 63 65 20 6d 61 72 6b 73 20 6f 77 6e 65 64 20 62 79 20 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 20 45 73 74 61 74 65 20 4c 4c Data Ascii: 6026ential usererage fully supports the principles of the Fair Housing Act and the Equal Opportunity Act. Owned by a subsidiary of NRT LLC. Coldwell Banker and the Coldwell Banker Logo are registered service marks owned by Coldwell Banker Real Estate LL
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 6e 69 65 73 2f 43 42 52 2f 50 30 30 35 30 30 30 30 30 46 44 64 71 51 57 33 67 39 69 6a 49 35 79 4b 45 44 69 72 56 77 30 6f 30 6c 38 76 77 71 42 75 2f 6c 6f 67 6f 73 2f 50 30 31 36 30 30 30 30 30 47 32 4f 43 4a 77 6d 49 4a 6e 6f 43 4b 46 36 5a 73 34 79 34 58 62 79 67 47 62 63 4a 65 36 76 2e 6a 70 67 3f 77 69 64 74 68 3d 35 30 30 22 2c 22 62 75 74 74 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 33 39 38 39 63 39 22 2c 22 63 68 72 6f 6d 65 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 6c 6f 75 64 2e 72 65 61 6c 6f 67 79 70 72 6f 64 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 69 65 73 2f 43 42 52 2f 50 30 30 35 30 30 30 30 30 46 44 64 71 51 57 33 67 39 69 6a 49 35 79 4b 45 44 69 72 56 Data Ascii: nies/CBR/P00500000FDdqQW3g9ijI5yKEDirVw0o0l8vwqBu/logos/P01600000G2OCJwmIJnoCKF6Zs4y4XbygGbcJe6v.jpg?width=500","button_background_color":"#3989c9","chrome_header_logo_path":"https://images.cloud.realogyprod.com/companies/CBR/P00500000FDdqQW3g9ijI5yKEDirV
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 61 6c 74 79 22 2c 22 65 63 6f 6d 6d 5f 61 6c 6c 6f 77 5f 63 75 73 74 6f 6d 5f 6c 6f 67 6f 22 3a 22 66 61 6c 73 65 22 2c 22 65 63 6f 6d 6d 5f 69 6d 61 67 65 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 22 3a 22 22 2c 22 65 63 6f 6d 6d 5f 69 6d 61 67 65 5f 73 69 67 6e 75 70 5f 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2d 73 74 61 74 69 63 2e 6d 6f 78 69 77 6f 72 6b 73 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 62 72 2f 74 63 6d 61 2f 6c 6f 67 6f 5f 77 68 69 74 65 5f 74 72 61 6e 73 5f 62 67 2e 70 6e 67 22 2c 22 65 6d 61 69 6c 5f 62 75 74 74 6f 6e 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 65 6e 61 62 6c 65 5f 6d 6c 5f 7a 61 70 5f 6d 69 67 72 61 74 69 6f 6e 22 3a 22 74 72 75 65 22 2c 22 66 6c 79 65 72 5f Data Ascii: alty","ecomm_allow_custom_logo":"false","ecomm_image_header_logo":"","ecomm_image_signup_logo":"https://images-static.moxiworks.com/static/images/br/tcma/logo_white_trans_bg.png","email_button_font_color":"#ffffff","enable_ml_zap_migration":"true","flyer_
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 6f 77 73 65 72 73 20 68 61 76 65 20 69 6d 70 6f 72 74 61 6e 74 20 73 65 63 75 72 69 74 79 20 75 70 64 61 74 65 73 20 61 6e 64 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 62 65 74 74 65 72 20 6f 70 74 69 6d 69 7a 65 64 20 66 6f 72 20 66 61 73 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 77 69 74 68 20 6d 6f 64 65 72 6e 20 77 65 62 73 69 74 65 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 74 72 61 6e 73 66 65 72 20 61 6e 79 20 62 6f 6f 6b 6d 61 72 6b 73 20 6f 72 20 66 61 76 6f 72 69 74 65 73 20 79 6f 75 20 68 61 76 65 20 73 61 76 65 64 2e 20 43 6c 69 63 6b 20 6f 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 69 63 6f 6e 73 20 62 65 6c 6f 77 20 74 6f 20 62 65 20 74 61 6b 65 6e 20 74 6f 20 74 68 65 20 66 72 65 65 20 64 6f 77 6e 6c 6f 61 64 20 70 Data Ascii: owsers have important security updates and are generally better optimized for fast performance with modern websites. You will be able to transfer any bookmarks or favorites you have saved. Click on one of the icons below to be taken to the free download p
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 6c 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 75 72 6e 20 6f 6e 20 6c 69 6e 6b 20 74 6f 20 41 75 74 6f 4d 61 69 6c 20 69 6e 20 45 6e 67 61 67 65 20 43 61 6d 70 61 69 67 6e 73 20 66 6f 72 20 62 72 6f 6b 65 72 61 67 65 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 51 75 61 6e 74 75 6d 20 44 69 67 69 74 61 6c 2e 22 7d 2c 22 72 61 74 69 6e 67 73 5f 61 6e 64 5f 72 65 76 69 65 77 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 52 61 74 69 6e 67 73 20 61 6e 64 20 52 65 76 69 65 77 73 22 2c 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 45 6e 61 62 6c 65 20 72 61 74 69 6e 67 73 20 61 6e 64 20 72 65 76 69 65 77 73 22 7d 2c 22 72 6f 73 74 65 72 5f 65 6d 61 69 6c 5f 65 78 70 6f Data Ascii: l","enabled":false,"description":"Turn on link to AutoMail in Engage Campaigns for usererage customers of Quantum Digital."},"ratings_and_reviews":{"name":"Ratings and Reviews","enabled":false,"description":"Enable ratings and reviews"},"roster_email_expo
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 32 39 43 46 38 32 35 45 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 36 33 43 42 34 44 36 33 2d 34 39 32 39 2d 34 42 45 31 2d 38 43 39 33 2d 37 36 36 41 41 39 43 45 43 31 34 44 22 2c 22 32 39 43 46 38 34 30 44 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 32 39 43 46 38 32 32 30 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 43 41 41 37 33 39 33 36 2d 34 42 34 38 2d 34 44 44 45 2d 41 33 37 32 2d 42 44 45 33 46 34 42 46 33 37 33 46 22 2c 22 32 39 43 46 38 38 37 42 2d 33 31 31 35 2d 31 31 44 37 2d 41 32 43 37 2d 30 30 42 30 44 30 34 39 34 35 35 38 22 2c 22 32 34 44 45 37 Data Ascii: -00B0D0494558","29CF825E-3115-11D7-A2C7-00B0D0494558","63CB4D63-4929-4BE1-8C93-766AA9CEC14D","29CF840D-3115-11D7-A2C7-00B0D0494558","29CF8220-3115-11D7-A2C7-00B0D0494558","CAA73936-4B48-4DDE-A372-BDE3F4BF373F","29CF887B-3115-11D7-A2C7-00B0D0494558","24DE7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.10	49872	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	897	OUT	GET /s/player/a62d836d/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D Range: bytes=522140-522140 If-Range: Mon, 21 Oct 2024 04:28:38 GMT
2024-10-23 22:50:51 UTC	740	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 19:23:25 GMT Expires: Thu, 23 Oct 2025 19:23:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Content-Range: bytes 522140-522140/2466682 Content-Length: 1 Age: 12446 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:51 UTC	1	IN	Data Raw: 6f Data Ascii: o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.10	49882	18.198.218.82	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	651	OUT	GET /location?rapidapi-key=mKTYRiJxjxmshhou6VAm18RBVSJkp1eyJLYjsn6w8rRmBQPjDW&callback=jQuery3710923492156920481_1729723842526&send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842527 HTTP/1.1 Host: telize-v1.p.rapidapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	489	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 399 Connection: close Cache-Control: no-cache Access-Control-Allow-Origin: * X-RateLimit-requests-Limit: 100000 X-RateLimit-requests-Remaining: 50910 X-RateLimit-requests-Reset: 62208 Server: RapidAPI-1.2.8 X-RapidAPI-Version: 1.2.8 X-RapidAPI-Region: AWS - eu-central-1 X-RapidAPI-Request-Id: 4aa5d23147452c509eba3aa52e94876ae446a0149b2f0e1e18508c256fc600e5
2024-10-23 22:50:51 UTC	399	IN	Data Raw: 6a 51 75 65 72 79 33 37 31 30 39 32 33 34 39 32 31 35 36 39 32 30 34 38 31 5f 31 37 32 39 37 32 33 38 34 32 35 32 36 28 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 38 33 34 2c 22 63 69 74 79 22 3a 22 44 61 6c 6c 61 73 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 43 68 69 63 61 67 6f 22 2c 22 61 73 6e 22 3a 38 31 30 30 2c 22 6f 66 66 73 65 74 22 3a 2d 31 38 30 30 30 2c 22 72 65 67 69 6f 6e 22 3a 22 54 65 78 61 73 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 36 37 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 Data Ascii: jQuery3710923492156920481_1729723842526({"is_in_european_union":false,"longitude":-96.8834,"city":"Dallas","timezone":"America\/Chicago","asn":8100,"offset":-18000,"region":"Texas","latitude":32.8167,"organization":"QuadraNet Enterprises LLC","country_cod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.10	49884	151.101.65.229	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	703	OUT	GET /npm/@moxiworks/project-vitruvius@0.0.21/build/fonts/Vitruvius-icon-set.ttf?xu4n51 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://kristalittle.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.jsdelivr.net/npm/@moxiworks/project-vitruvius@0.0.21/build/project-vitruvius-icons.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:51 UTC	747	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17440 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: font/ttf X-JSD-Version: 0.0.21 X-JSD-Version-Type: version ETag: W/"4420-qeHq3hdxFl0rdZdgpo15QPY1llg" Accept-Ranges: bytes Age: 3731604 Date: Wed, 23 Oct 2024 22:50:51 GMT X-Served-By: cache-fra-etou8220061-FRA, cache-dfw-kdal2120121-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 6f 00 00 00 bc 00 00 00 60 63 6d 61 70 17 56 d2 d3 00 00 01 1c 00 00 00 54 67 61 73 70 00 00 00 10 00 00 01 70 00 00 00 08 67 6c 79 66 8e 28 38 64 00 00 01 78 00 00 3e 18 68 65 61 64 13 46 69 c6 00 00 3f 90 00 00 00 36 68 68 65 61 07 c2 04 12 00 00 3f c8 00 00 00 24 68 6d 74 78 3a 00 2f 0b 00 00 3f ec 00 00 01 44 6c 6f 63 61 5b 86 6a c6 00 00 41 30 00 00 00 a4 6d 61 78 70 00 68 01 1d 00 00 41 d4 00 00 00 20 6e 61 6d 65 cf 79 ae 3f 00 00 41 f4 00 00 02 0a 70 6f 73 74 00 03 00 00 00 00 44 00 00 00 00 20 00 03 03 f9 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2o`cmapVTgasppglyf(8dx>headFi?6hhea?$hmtx:/?Dloca[jA0maxphA namey?ApostD 3@
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 27 1c 02 85 1c 27 55 55 55 55 fe a6 53 53 53 53 53 69 53 53 53 53 53 00 00 00 00 02 00 60 00 62 03 a0 03 1e 00 30 00 61 00 00 01 2e 01 23 22 06 0f 01 11 34 26 27 2e 01 23 22 06 07 0e 01 15 11 27 2e 01 23 22 06 07 0e 01 15 14 16 1f 01 1e 01 33 32 36 3f 01 3e 01 35 34 26 27 01 0e 01 23 22 26 2f 01 11 14 06 07 0e 01 23 22 26 27 2e 01 35 11 07 0e 01 23 22 26 27 2e 01 35 34 36 3f 01 3e 01 33 32 16 1f 01 1e 01 15 14 06 07 01 e0 04 08 05 06 08 04 81 04 03 04 08 06 05 08 04 03 04 81 04 08 06 05 08 04 03 04 03 04 ab 04 08 05 05 09 04 ab 03 04 04 03 01 b9 04 08 05 06 08 04 81 04 03 04 08 05 06 08 04 03 04 81 04 08 06 05 08 04 03 04 04 03 ab 04 09 05 05 08 04 ab 04 03 04 03 01 3e 03 04 04 03 86 01 89 05 09 04 04 03 03 04 04 09 05 fe 77 86 03 04 04 03 04 09 05 05 09 Data Ascii: ''UUUUSSSSSiSSSSS`b0a.#"4&'.#"'.#"326?>54&'#"&/#"&'.5#"&'.546?>32>w
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 1e 1e 1d 66 44 45 4d 4e 45 44 66 1d 1e 00 00 00 00 01 00 fa 00 b7 03 06 02 c2 00 0c 00 00 01 37 17 07 17 07 27 07 27 37 27 37 17 02 00 d5 31 d6 d6 31 d5 d5 31 d6 d6 31 d5 01 ed d5 30 d5 d6 30 d5 d5 30 d6 d5 30 d5 00 00 04 00 56 00 19 03 e7 03 a8 00 0a 00 1f 00 23 00 4e 00 00 25 01 36 26 27 26 06 07 01 17 37 01 07 27 37 27 01 07 27 01 3e 01 17 37 17 07 1e 01 0f 01 17 07 25 17 07 27 01 36 16 17 16 06 07 06 26 27 26 27 2e 01 37 36 37 36 17 1e 01 17 16 07 0e 01 27 2e 01 37 36 26 07 06 07 06 16 17 16 17 1e 01 37 02 12 01 5d 0b 0b 14 13 2c 0b fe a3 08 56 01 bb 8b 2c 8b 22 fe b8 a8 0f 01 65 12 41 22 20 3c 22 13 05 10 03 4e 1a fe ef 5f 1a 5e fe b5 09 15 06 06 05 08 3b 6e 2e 23 14 14 09 0c 0d 1f 24 27 28 3b 0d 0c 12 04 14 0a 0a 07 04 16 53 26 17 08 09 09 11 11 1c Data Ascii: fDEMNEDf7''7'711110000V#N%6&'&7'7''>7%'6&'&'.7676'.76&7],V,"eA" <"N_^;n.#$'(;S&
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 01 01 5c 09 07 03 2e 04 13 09 62 05 0c 06 06 0c 07 21 03 09 09 6f 09 13 05 2e 08 11 09 08 11 09 2e 05 12 0a 6f 09 09 04 20 06 0d 06 06 0b 06 62 09 13 03 2e 04 07 09 5c 01 01 01 01 5c 09 07 04 2e 03 13 09 62 1e 05 0f 09 5c 1c 57 08 07 01 02 02 02 02 02 08 08 57 1c 5c 09 10 05 06 0e 08 08 11 09 07 05 03 1e 43 2c 04 0f 08 0b 16 0b 0b 16 0b 08 10 04 2b 43 1e 03 06 06 09 11 08 08 0e 07 05 10 08 5c 1c 57 08 07 01 02 02 02 02 01 07 08 57 1c 5c 09 10 04 07 0e 08 08 11 09 06 06 03 1e 43 2b 04 10 08 0b 16 0b 0b 16 0b 08 0f 04 2c 43 1e 03 05 07 09 11 08 08 0e 07 01 ad 10 10 38 25 25 2b 2a 26 25 38 10 10 10 10 38 25 26 2a 2b 25 25 38 10 10 01 bf 40 5a 5a 40 40 5a 5a 01 0e 06 0d 06 06 0b 06 62 09 12 04 2e 04 07 09 5c 01 01 01 01 5c 09 07 04 2e 04 12 09 62 06 0b 06 06 Data Ascii: \.b!o..o b.\\.b\WW\C,+C\WW\C+,C8%%+&%88%&+%%8@ZZ@@ZZb.\\.b
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 25 07 27 26 27 2e 01 27 26 35 34 37 3e 01 37 36 33 32 17 1e 01 17 16 15 14 07 0e 01 07 06 13 34 27 2e 01 27 26 23 22 07 0e 01 07 06 15 14 17 1e 01 17 16 17 36 37 3e 01 37 36 07 22 26 35 34 36 33 32 16 15 14 06 27 32 36 35 34 26 23 22 06 15 14 16 02 15 15 15 42 32 32 42 10 11 17 16 4e 34 34 3b 3b 34 34 4e 16 17 11 10 42 32 32 94 13 12 40 2b 2a 31 31 2a 2b 40 12 13 0f 0f 3a 2c 2c 3b 3b 2c 2c 3a 0f 0f eb 3a 51 51 3a 3a 51 51 3a 24 34 34 24 24 34 34 34 1e 1e 60 51 51 86 34 35 26 3b 34 34 4e 17 16 16 17 4e 34 34 3b 26 35 34 86 51 51 01 b7 31 2a 2b 40 12 13 13 12 40 2b 2a 31 20 2e 2d 78 49 49 56 56 49 49 78 2d 2e 74 52 3a 39 52 52 39 3a 52 34 33 25 24 34 34 24 25 33 00 00 04 00 a6 00 15 03 51 03 0b 00 21 00 2b 00 30 00 34 00 00 01 35 34 37 3e 01 37 36 33 32 17 Data Ascii: %'&'.'&547>76324'.'&#"67>76"&54632'2654&#"B22BN44;;44NB22@+11+@:,,;;,,::QQ::QQ:$44$$444`QQ45&;44NN44;&54QQ1+@@+1 .-xIIVVIIx-.tR:9RR9:R43%$44$%3Q!+04547>7632
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 06 22 27 01 26 34 37 36 32 1f 01 1f 01 3e 01 33 32 16 15 14 06 07 17 3e 01 37 3e 01 37 3e 01 37 26 27 2e 01 23 22 07 17 3e 01 35 34 26 23 22 06 07 17 07 14 06 23 22 26 37 34 36 33 32 16 07 14 16 17 32 16 15 39 01 05 03 06 0e 07 18 38 20 0b 15 0b 09 11 04 04 06 08 0b 14 0a 1e 34 17 05 09 04 3c 3e 3d 7b 3c 3c 3a 09 0f 01 02 0a 09 40 44 44 88 44 44 42 03 03 01 03 03 01 26 53 4f 50 9a 4b 4b 48 06 01 06 02 04 03 06 0d 07 16 30 1a 1b 38 1c 74 07 07 06 12 07 fd 8b 07 07 06 12 07 88 23 37 0f 22 12 3b 53 08 08 3c 1f 3d 1e 18 2d 15 04 09 04 40 41 41 86 45 45 47 d7 03 03 3a 29 09 11 08 7f 42 0d 09 3b 53 01 0d 09 09 0d 01 39 29 09 0d 01 db 02 06 03 06 0e 06 16 27 12 06 0c 05 04 06 08 08 11 04 05 0b 06 11 24 14 05 09 04 3a 2a 29 31 06 07 0c 02 0a 09 09 0f 02 0d 07 08 Data Ascii: "'&4762>32>7>7>7&'.#">54&#"#"&74632298 4<>={<<:@DDDDB&SOPKKH08t#7";S<=-@AAEEG:)B;S9)'$:*)1
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 78 23 23 23 23 78 51 50 5c 33 01 a0 01 c0 21 2e 2e 21 21 2e 2e 21 2a 3c 3c 2a 2a 3c 3c fe 4e 1f 1f 6a 47 48 51 51 48 47 6a 1f 1f 1f 1f 6a 47 48 51 51 48 47 6a 1f 1f 33 23 23 78 51 50 5c 5c 50 51 78 23 23 23 23 78 51 50 5c 5c 50 51 78 23 23 01 a1 34 34 00 01 00 ed 00 b6 03 14 02 dd 00 0c 00 00 01 33 15 23 15 23 35 23 35 33 35 33 15 02 23 f1 f1 44 f2 f2 44 01 ec 44 f2 f2 44 f1 f1 00 00 02 00 b8 00 24 03 42 03 5c 00 0d 00 15 00 00 13 06 26 37 01 36 16 07 03 0e 01 27 03 05 3f 01 36 16 1f 01 13 01 cc 13 0f 0e 02 60 0e 20 04 a0 04 25 08 75 fe d0 49 f5 08 0f 03 5c 81 fe 14 01 17 02 22 0c 02 19 0c 12 12 fc e5 13 04 12 01 11 1e 3b 18 01 09 08 d7 02 80 fe 4f 00 00 04 00 57 00 1c 03 a9 03 6e 00 1b 00 37 00 3c 00 8f 00 00 25 22 27 2e 01 27 26 35 34 37 3e 01 37 36 33 Data Ascii: x####xQP\3!..!!..!<<*<<NjGHQQHGjjGHQQHGj3##xQP\\PQx####xQP\\PQx##443##5#5353#DDDD$B\&76'?6` %uI\";OWn7<%"'.'&547>763
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 57 11 11 3b 28 28 2d 2e 27 28 3c 11 11 0d 26 33 33 62 46 45 62 01 ca fd bb 02 45 f2 5a 01 f3 17 0e fe 6c 0f 17 17 0f 01 94 0e 17 9e 2d 28 28 3b 11 12 12 11 3b 28 28 2d 3f 1e 1e 3f 45 62 62 45 9e 34 fe 89 01 77 7c 83 83 00 00 01 01 30 00 3f 02 ce 03 40 00 0b 00 00 01 07 27 37 17 31 17 07 27 11 23 11 01 e1 85 2c d0 2b a3 2b 84 3e 02 ca 85 2b d0 2c a4 2b 84 fd 76 02 8b 00 00 00 00 01 01 1a 01 3e 02 e5 02 55 00 0b 00 00 01 07 27 37 31 37 15 35 17 31 17 07 02 00 b6 30 b6 30 30 b5 30 01 f4 b6 30 b6 31 01 01 31 b5 30 00 00 00 04 00 4d 00 a9 03 b4 02 c2 00 0f 00 13 00 16 00 1a 00 00 25 21 22 26 35 11 34 36 33 21 32 16 15 11 14 06 03 21 11 21 27 05 11 17 15 37 27 03 8d fc e7 10 17 17 10 03 19 10 17 17 1d fd 00 03 00 ca fe ea 33 7b 7b a9 16 10 01 cd 10 16 16 10 fe Data Ascii: W;((-.'(<&33bFEbEZl-((;;((-??EbbE4w\|0?@'71'#,++>+,+v>U'7175100000110M%!"&5463!2!!'7'3{{
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 07 03 02 03 06 07 06 13 0b 0f 19 0a 0b 0a 06 06 2f 04 03 01 31 50 1e 1e 1e 18 19 18 43 2a 2a 5c 31 32 5c 2a 2a 42 19 19 18 01 cf 32 5c 2a 2a 43 18 19 18 08 07 16 27 11 08 33 2a 0a 10 06 07 07 10 11 10 2d 1c 1d 40 24 1b 33 18 18 26 0f 0f 0f 06 07 07 13 0b 0b 1b 0f 0e 1f 10 10 20 10 19 2b 13 13 1a 08 03 05 07 02 07 06 06 07 01 06 0a 05 0e 24 16 24 3e 19 1a 1a 13 14 13 33 1f 29 45 1c 1c 1d 0b 0a 0a 19 0f 08 16 0e 0e 19 0a 0b 12 07 0c 14 08 08 08 0e 0e 0d 22 14 12 1d 0b c7 11 2a 1a 16 43 2d 2d 65 38 31 5c 2a 2a 43 18 19 18 18 19 18 43 2a 2a 5c 31 00 00 01 00 70 00 87 03 88 03 0a 00 58 00 00 01 0e 01 07 16 14 15 14 06 07 0e 01 07 0e 01 07 0e 01 07 0e 01 23 22 26 27 1e 01 33 32 36 37 22 26 27 2e 01 27 1e 01 33 32 36 37 2e 01 27 2e 01 3d 01 1e 01 17 2e 01 27 2e Data Ascii: /1PC\12\B2\*C'3-@$3& +$$>3)E"C--e81\CC*\1pX#"&'3267"&'.'3267.'.=.'.
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 48 48 60 07 16 07 01 7f 18 18 5f 48 48 60 02 07 e5 07 07 e5 05 0f 08 09 0f 05 25 5a bb 04 09 03 13 13 03 09 04 bb 4a 29 69 20 1f 1f 31 0f 0f 0f 0f 31 1f 1f 20 69 5e 05 0f 09 08 0f 05 fe 89 05 03 74 74 03 05 75 28 55 55 28 53 6d 04 03 03 04 6d 43 04 04 94 3b 06 02 11 0d 0c 11 0b 08 3f 26 0d 0e 35 28 28 36 04 04 d6 0d 0e 35 29 28 35 00 00 00 00 04 00 80 00 40 03 80 02 eb 00 1c 00 28 00 34 00 39 00 00 01 2e 01 23 21 22 06 07 03 11 14 16 3b 01 32 36 3d 01 21 15 14 16 3b 01 32 36 35 11 03 01 22 26 35 34 36 33 32 16 15 14 06 21 22 26 35 34 36 33 32 16 15 14 06 25 37 21 17 21 03 27 06 21 15 fe 2a 15 21 06 59 19 12 2a 12 19 02 00 19 12 2a 12 19 59 fd ee 1a 26 26 1a 1b 25 25 01 bb 1b 25 25 1b 1a 26 26 fd d0 40 01 d6 40 fd aa 02 c0 12 19 19 12 ff 00 fe ab 12 19 19 Data Ascii: HH`_HH`%ZJ)i 11 i^ttu(UU(SmmC;?&5((65)(5@(49.#!";26=!;265"&54632!"&54632%7!!'!!Y*Y&&%%%%&&@@

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.10	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:51 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225051Z-16849878b78gvgmlcfru6nuc5400000006vg000000006y6p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.10	49888	64.246.164.134	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	979	OUT	GET /services/get-widget/?currency=USD&partialName=%20Featured%20Properties&class=featuredproperties&folder=featuredproperties&admin=0&options%5Bimagewidth%5D=437&options%5Bimageheight%5D=292&options%5Bshowarrows%5D=always&options%5Bcolumns%5D=2&options%5Brows%5D=2&options%5Bhidebuffer%5D=10&options%5Basync%5D=true&status=partial&name=0&data%5Btitle%5D=Featured%20Properties&data%5Blist%5D=894439&data%5Bnumblocks%5D=20 HTTP/1.1 Host: kristalittle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.906342610.1729723845; _gid=GA1.1.730418092.1729723845; _gat=1; _gid=GA1.2.730418092.1729723845; _gat_UA-134100643-5=1; _ga_GYEG79KM6W=GS1.1.1729723847.1.0.1729723847.0.0.0; _ga=GA1.1.906342610.1729723845
2024-10-23 22:50:51 UTC	689	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:36:54 GMT server: Apache expires: Wed, 23 Oct 2024 22:41:55 GMT content-security-policy: upgrade-insecure-requests strict-transport-security: max-age=31536000 link: <https://kristalittle.com/wp-json/>; rel="https://api.w.org/" last-modified: Wed, 23 Oct 2024 22:36:55 GMT x-renderedpage: true vary: Accept-Encoding x-content-type-options: nosniff content-type: text/html;charset=UTF-8 v-backend: dugout13-pr x-varnish: 252510769 244483353 age: 836 via: 1.1 varnish (Varnish/6.5) cache-control: private, max-age=0 accept-ranges: bytes content-length: 278092 x-app-server: varnish_dugout/dugout-varnish22-pr connection: close
2024-10-23 22:50:51 UTC	2252	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 61 74 75 72 65 64 50 72 6f 70 65 72 74 69 65 73 22 3e 0a 3c 68 33 3e 46 65 61 74 75 72 65 64 20 50 72 6f 70 65 72 74 69 65 73 3c 2f 68 33 3e 0a 3c 64 69 76 20 69 64 3d 22 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 2d 30 2d 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 22 20 64 61 74 61 2d 72 6f 77 73 3d 22 32 22 20 64 61 74 61 2d 63 6f 6c 73 3d 22 32 22 20 64 61 74 61 2d 6c 69 6d 69 74 3d 22 32 30 22 20 63 6c 61 73 73 3d 22 66 65 61 74 75 72 65 64 70 72 6f 70 65 72 74 69 65 73 20 72 65 73 70 6f 6e 73 69 76 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 72 62 6c 6f 63 6b 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 73 6c 69 64 65 72 62 6c 6f 63 6b 20 66 65 61 74 75 72 65 Data Ascii: <div class="featuredProperties"><h3>Featured Properties</h3><div id="featuredproperties-0-featuredproperties" data-rows="2" data-cols="2" data-limit="20" class="featuredproperties responsive"><div class="sliderblocks"><div class="flexsliderblock feature
2024-10-23 22:50:51 UTC	2896	IN	Data Raw: 26 71 75 6f 74 3b 30 32 5c 2f 31 35 5c 2f 32 30 32 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 6f 70 65 72 74 79 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 52 65 73 69 64 65 6e 74 69 61 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 6f 70 65 72 74 79 5f 74 79 70 65 5f 69 64 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 6c 69 73 74 69 6e 67 5f 6f 66 66 69 63 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 6f 6c 64 77 65 6c 6c 20 42 61 6e 6b 65 72 20 52 65 61 6c 74 79 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 79 65 61 72 5f 62 75 69 6c 64 26 71 75 6f 74 3b 3a 32 30 30 36 2c 26 71 75 6f 74 3b 63 72 65 61 74 65 64 5f 64 61 74 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 30 32 5c 2f 31 36 5c 2f 32 30 32 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6c 69 73 Data Ascii: "02\/15\/2024","property_type":"Residential","property_type_id":1,"listing_office":"Coldwell Banker Realty","year_build":2006,"created_date":"02\/16\/2024","lis
2024-10-23 22:50:51 UTC	8688	IN	Data Raw: 2f 5c 2f 77 77 77 2e 63 6f 6c 64 77 65 6c 6c 62 61 6e 6b 65 72 68 6f 6d 65 73 2e 63 6f 6d 5c 2f 61 7a 5c 2f 73 65 64 6f 6e 61 5c 2f 61 67 65 6e 74 5c 2f 61 6e 64 72 65 77 2d 62 72 65 61 72 6c 65 79 5c 2f 61 69 64 5f 31 30 30 37 39 33 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 61 67 65 72 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6d 6c 73 69 64 26 71 75 6f 74 3b 3a 33 33 2c 26 71 75 6f 74 3b 6c 69 63 65 6e 73 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 42 52 30 30 36 34 31 30 30 30 30 20 41 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 66 69 72 73 74 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 6e 64 72 65 77 26 71 75 6f 74 3b 7d 2c 26 71 75 6f 74 3b 63 72 65 64 69 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 53 65 64 6f 6e 61 20 56 65 72 64 65 Data Ascii: /\/www.coldwellbankerhomes.com\/az\/sedona\/agent\/andrew-brearley\/aid_100793","pager":null,"mlsid":33,"license":"BR006410000 AZ","firstname":"Andrew"},"credit":"Sedona Verde
2024-10-23 22:50:51 UTC	2896	IN	Data Raw: 36 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 31 39 31 34 65 33 33 61 2d 30 61 64 64 2d 34 38 36 32 2d 62 35 35 39 2d 35 38 64 63 33 32 32 65 39 61 32 62 5c 2f 30 5f 32 5f 73 6d 61 6c 6c 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 72 61 77 5f 75 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 31 36 2e 6d 6f 78 69 2e 6f 6e 6c 5c 2f 69 6d 67 2d 70 72 5c 2f 61 5c 2f 31 39 31 34 65 33 33 61 2d 30 61 64 64 2d 34 38 36 32 2d 62 35 35 39 2d 35 38 64 63 33 32 32 65 39 61 32 62 5c 2f 30 5f 32 5f 72 61 77 2e 6a 70 67 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 68 65 69 67 68 74 26 71 75 6f 74 3b 3a 31 34 31 31 2c 26 71 75 6f 74 3b 77 69 64 74 68 26 71 75 6f 74 3b 3a 39 34 30 2c 26 71 75 6f 74 3b 6d 69 6d 65 5f Data Ascii: 6.moxi.onl\/img-pr\/a\/1914e33a-0add-4862-b559-58dc322e9a2b\/0_2_small.jpg","raw_url":"https:\/\/i16.moxi.onl\/img-pr\/a\/1914e33a-0add-4862-b559-58dc322e9a2b\/0_2_raw.jpg","height":1411,"width":940,"mime_
2024-10-23 22:50:51 UTC	16384	IN	Data Raw: 3b 73 65 6e 69 6f 72 5f 63 6f 6d 6d 75 6e 69 74 79 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 61 70 70 72 6f 78 5f 6c 69 76 69 6e 67 5f 61 72 65 61 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 73 68 6f 77 5f 62 72 6f 6b 65 72 61 67 65 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 76 65 73 74 69 6d 61 74 65 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6c 69 73 74 69 6e 67 5f 63 61 74 65 67 6f 72 69 65 73 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 6c 75 78 75 72 79 2d 65 68 64 32 26 71 75 6f 74 3b 5d 2c 26 71 75 6f 74 3b 63 75 72 72 65 6e 63 79 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 44 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 6c 73 5f 63 75 72 72 65 6e 63 79 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 44 26 71 Data Ascii: ;senior_community":null,"approx_living_area":null,"show_usererage":false,"vestimate":null,"listing_categories":["luxury-ehd2"],"currency":"USD","mls_currency":"USD&q
2024-10-23 22:50:52 UTC	9680	IN	Data Raw: 71 75 6f 74 3b 67 6c 6f 62 61 6c 5f 64 69 73 63 6c 6f 73 75 72 65 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 72 65 73 75 6c 74 73 5f 64 69 73 63 6c 61 69 6d 65 72 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 64 61 74 61 5f 6c 61 73 74 5f 75 70 64 61 74 65 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 32 30 32 34 2d 31 30 2d 32 33 54 31 32 3a 34 38 3a 30 30 2e 30 30 30 2d 30 37 3a 30 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 6d 61 67 65 73 5f 6c 61 73 74 5f 75 70 64 61 74 65 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 30 38 5c 2f 30 39 5c 2f 32 30 32 34 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 69 6d 61 72 79 61 67 65 6e 74 63 6f 6d 70 61 6e 79 69 64 26 71 75 6f 74 3b 3a 33 37 Data Ascii: quot;global_disclosure_required":false,"results_disclaimer_required":false,"data_last_updated":"2024-10-23T12:48:00.000-07:00","images_last_updated":"08\/09\/2024","primaryagentcompanyid":37
2024-10-23 22:50:52 UTC	2896	IN	Data Raw: 79 20 5c 26 71 75 6f 74 3b 41 6d 79 20 44 2e 5c 26 71 75 6f 74 3b 20 42 72 6f 77 6e 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 73 65 6c 6c 69 6e 67 5f 61 67 65 6e 74 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 73 65 6c 6c 69 6e 67 5f 61 67 65 6e 74 5f 6f 66 66 69 63 65 5f 6e 61 6d 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 6c 73 5f 6e 6f 6e 5f 72 65 73 74 72 69 63 74 65 64 5f 73 6f 6c 64 5f 64 69 73 70 6c 61 79 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 63 6f 6d 6d 65 6e 74 73 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 42 65 6c 6f 76 65 64 20 47 61 72 64 65 6e 73 3a 20 41 6e 20 4f 61 6b 20 43 72 65 65 6b 20 57 61 74 65 72 66 72 6f 6e 74 20 43 72 65 61 74 69 76 65 Data Ascii: y \"Amy D.\" Brown","selling_agentname":"","selling_agent_office_name":"","mls_non_restricted_sold_display":false,"comments":"Beloved Gardens: An Oak Creek Waterfront Creative
2024-10-23 22:50:52 UTC	1448	IN	Data Raw: 6f 74 3b 3a 31 39 39 39 37 33 31 35 35 2c 26 71 75 6f 74 3b 64 69 73 70 6c 61 79 5f 73 71 66 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 31 2c 38 31 33 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 64 69 73 70 6c 61 79 5f 70 72 69 63 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 24 31 2c 38 30 30 2c 30 30 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 70 72 69 63 65 26 71 75 6f 74 3b 3a 31 38 30 30 30 30 30 2c 26 71 75 6f 74 3b 73 74 61 74 75 73 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 63 74 69 76 65 26 71 75 6f 74 3b 7d 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 70 72 6f 70 63 61 72 64 2d 6c 69 73 74 69 6e 67 2d 69 64 3d 22 31 39 39 36 37 37 34 37 38 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 63 61 72 64 2d 6c 69 73 74 69 6e Data Ascii: ot;:199973155,"display_sqft":"1,813","display_price":"$1,800,000","price":1800000,"status":"Active"}"></div></div><div data-propcard-listing-id="199677478"><div class="searchcard-listin
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 6d 69 6e 69 6d 75 6d 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 70 72 69 63 65 5f 6d 61 78 69 6d 75 6d 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 62 65 64 72 6f 6f 6d 73 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 62 61 74 68 72 6f 6f 6d 73 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 62 61 74 68 72 6f 6f 6d 5f 64 65 74 61 69 6c 73 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 66 75 6c 6c 5f 62 61 74 68 73 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 68 61 6c 66 5f 62 61 74 68 73 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 70 61 72 74 69 61 6c 5f 62 61 74 68 73 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 74 68 72 65 65 5f 71 75 61 72 74 65 72 5f 62 61 74 68 73 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f Data Ascii: minimum":null,"price_maximum":null,"bedrooms":1,"bathrooms":1,"bathroom_details":{"full_baths":null,"half_baths":null,"partial_baths":null,"three_quarter_baths":null,&quo
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 66 75 6c 6c 5f 64 69 73 63 6c 61 69 6d 65 72 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 62 72 6f 6b 65 72 5f 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 67 6c 6f 62 61 6c 5f 64 69 73 63 6c 6f 73 75 72 65 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 72 65 73 75 6c 74 73 5f 64 69 73 63 6c 61 69 6d 65 72 5f 72 65 71 75 69 72 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 64 61 74 61 5f 6c 61 73 74 5f 75 70 64 61 74 65 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 32 30 32 34 2d 31 30 2d 32 33 54 31 32 3a 34 38 3a 30 30 2e 30 30 30 Data Ascii: red":false,"full_disclaimer_required":false,"userer_attribution_required":false,"global_disclosure_required":false,"results_disclaimer_required":false,"data_last_updated":"2024-10-23T12:48:00.000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.10	49886	216.58.212.142	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	759	OUT	GET /s/player/a62d836d/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D
2024-10-23 22:50:51 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 31298 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 22:12:28 GMT Expires: Thu, 23 Oct 2025 22:12:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2303 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:51 UTC	692	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: (function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 72 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 6b 7c 7c 22 22 29 2b 22 5f 22 2b 67 2b 2b 2c 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6b 2c 65 29 7b 74 68 69 73 2e 67 3d 6b 3b 72 28 74 68 Data Ascii: th-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}function c(k,e){this.g=k;r(th
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 78 3d 21 31 7d 77 3d 78 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 6a 61 3d 77 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6d 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 31 3b 74 68 69 73 2e 41 3d 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 69 66 28 61 2e 6a 29 74 68 72 Data Ascii: ;break a}catch(a){}x=!1}w=x?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ja=w;function y(){this.j=!1;this.h=null;this.m=void 0;this.g=1;this.A=this.l=0;this.i=null}function z(a){if(a.j)thr
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 65 2e 64 6f 6e 65 3f 64 28 65 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c Data Ascii: turn b};this.return=function(b){return la(a,b)};this[Symbol.iterator]=function(){return this}}function na(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,g){function k(e){e.done?d(e.value):Promise.resol
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 28 65 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 3d 65 2e 74 68 65 6e 7d 63 61 74 63 68 28 68 29 7b 74 68 69 73 2e 6c 28 68 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4d 28 66 2c 65 29 3a 74 68 69 73 2e 6d 28 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 32 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 41 28 31 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 30 29 74 68 72 6f Data Ascii: (e)}};b.prototype.I=function(e){var f=void 0;try{f=e.then}catch(h){this.l(h);return}typeof f=="function"?this.M(f,e):this.m(e)};b.prototype.l=function(e){this.A(2,e)};b.prototype.m=function(e){this.A(1,e)};b.prototype.A=function(e,f){if(this.h!=0)thro
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 65 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 65 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 3f 6b 2e 68 28 68 29 3a 74 68 69 73 2e 67 2e 70 75 73 68 28 68 29 3b 74 68 69 73 2e Data Ascii: };b.prototype.catch=function(e){return this.then(void 0,e)};b.prototype.B=function(e,f){function h(){switch(l.h){case 1:e(l.i);break;case 2:f(l.i);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;this.g==null?k.h(h):this.g.push(h);this.
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 6c 26 26 28 4f 62 6a 65 63 74 5b 68 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 67 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 68 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 68 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 68 29 Data Ascii: l&&(Object[h]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&g(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var h=Object.seal({}),l=Object.seal({}),m=new a([[h,2],[l,3]]);if(m.get(h)!=2\|\|m.get(l)!=3)return!1;m.delete(h)
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 66 29 7b 66 3d 76 28 66 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 68 3d 6e 65 77 20 61 28 76 28 5b 5b 66 2c 22 73 22 Data Ascii: ]={};this[1]=b();this.size=0;if(f){f=v(f);for(var h;!(h=f.next()).done;)h=h.value,this.set(h[0],h[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var f=Object.seal({x:4}),h=new a(v([[f,"s"
2024-10-23 22:50:51 UTC	1378	IN	Data Raw: 72 6e 20 66 2e 6b 65 79 7d 29 7d 3b 0a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 76 61 6c 75 65 7d 29 7d 3b 0a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 66 2e 63 61 6c 6c 28 68 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 0a 67 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b Data Ascii: rn f.key})};g.prototype.values=function(){return c(this,function(f){return f.value})};g.prototype.forEach=function(f,h){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,f.call(h,m[1],m[0],this)};g.prototype[Symbol.iterator]=g.prototype.entries;
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 6b 2c 6b 2c 67 29 7d 29 7d 3b 0a 72 65 74 75 72 6e 20 62 7d 29 3b 0a 75 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 64 2e 6c 65 6e 67 74 68 2c 6b 3d 30 3b 6b 3c 67 3b 6b 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 6b 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 65 2c 6b 2c 64 29 29 7b 62 3d 65 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f Data Ascii: is.g.forEach(function(k){return c.call(d,k,k,g)})};return b});u("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var g=d.length,k=0;k<g;k++){var e=d[k];if(b.call(c,e,k,d)){b=e;break a}}b=vo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.10	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225051Z-r197bdfb6b42sc4ddemybqpm140000000nh00000000086pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.10	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225051Z-15b8d89586fzhrwgk23ex2bvhw00000000xg000000008znq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:51 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.10	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 497f5b85-801e-00a3-28f2-247cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225051Z-r197bdfb6b4rt57kw3q0f43mqg0000000b2000000000rn95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.10	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:51 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 952379c8-801e-0083-0604-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225051Z-15b8d89586fmhkw4gksnr1w3ds0000000dmg000000002ha6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.10	49894	142.250.185.238	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	898	OUT	GET /s/player/a62d836d/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FB_sLuvYowY; VISITOR_INFO1_LIVE=NdFDmQmxdgc; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgZw%3D%3D Range: bytes=522140-2466681 If-Range: Mon, 21 Oct 2024 04:28:38 GMT
2024-10-23 22:50:52 UTC	747	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 19:23:25 GMT Expires: Thu, 23 Oct 2025 19:23:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 21 Oct 2024 04:28:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Content-Range: bytes 522140-2466681/2466682 Content-Length: 1944542 Age: 12447 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:50:52 UTC	631	IN	Data Raw: 6f 6e 63 61 74 28 61 2e 62 7a 29 7d 3b 0a 73 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 2c 6c 2c 6d 2c 6e 2c 70 2c 71 29 7b 76 61 72 20 72 3d 71 4b 28 64 2c 63 2c 6e 29 3b 72 65 74 75 72 6e 20 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 44 3f 6e 65 77 20 5a 28 72 29 3a 6e 2e 4a 2e 55 28 29 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 62 62 28 22 68 74 6d 6c 35 5f 72 65 66 61 63 74 6f 72 5f 69 6e 5f 70 6c 61 79 65 72 5f 73 6c 6f 74 5f 67 65 6e 65 72 61 74 69 6f 6e 22 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 75 3d 6e 65 77 20 65 4a 28 30 2c 5b 72 2e 57 70 5d 29 3b 74 3d 77 41 61 28 62 2c 72 2e 6c 61 79 6f 75 74 49 64 2c 72 2e 47 70 2c 63 2c 72 4b 28 72 2e 70 6c 61 79 65 72 56 61 72 73 2c 72 2e 77 43 2c 66 2c 6d 2c 75 29 Data Ascii: oncat(a.bz)};sAa=function(a,b,c,d,e,f,h,l,m,n,p,q){var r=qK(d,c,n);return r instanceof ID?new Z(r):n.J.U().experiments.bb("html5_refactor_in_player_slot_generation")?function(t){var u=new eJ(0,[r.Wp]);t=wAa(b,r.layoutId,r.Gp,c,rK(r.playerVars,r.wC,f,m,u)
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 66 28 79 2e 69 6e 73 74 72 65 61 6d 41 64 50 6c 61 79 65 72 55 6e 64 65 72 6c 61 79 52 65 6e 64 65 72 65 72 26 26 74 4b 28 6e 29 29 7b 76 61 72 20 41 3d 79 2e 69 6e 73 74 72 65 61 6d 41 64 50 6c 61 79 65 72 55 6e 64 65 72 6c 61 79 52 65 6e 64 65 72 65 72 3b 75 3d 5b 79 41 61 28 61 2c 79 2e 63 6f 6e 74 65 6e 74 43 70 6e 2c 79 2e 72 72 2c 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 20 7a 41 61 28 62 2c 43 2e 73 6c 6f 74 49 64 2c 41 2c 79 2e 61 64 50 6c 61 63 65 6d 65 6e 74 43 6f 6e 66 69 67 2c 79 2e 72 72 2c 51 44 28 70 2c 43 29 29 7d 29 5d 2e 63 6f 6e 63 61 74 28 67 2e 78 28 75 29 29 7d 7d 72 65 74 75 72 6e 7b 6c 61 79 6f 75 74 3a 74 2c 0a 77 66 3a 75 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 75 3d 6e 65 77 20 65 4a 28 30 2c 5b 72 Data Ascii: f(y.instreamAdPlayerUnderlayRenderer&&tK(n)){var A=y.instreamAdPlayerUnderlayRenderer;u=[yAa(a,y.contentCpn,y.rr,function(C){return zAa(b,C.slotId,A,y.adPlacementConfig,y.rr,QD(p,C))})].concat(g.x(u))}}return{layout:t,wf:u}}:function(t){var u=new eJ(0,[r
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 26 26 28 61 2e 79 74 72 3d 63 2e 66 6b 29 3b 63 2e 76 78 26 26 28 61 2e 79 74 72 63 63 3d 63 2e 76 78 29 3b 63 2e 69 73 4d 64 78 50 6c 61 79 62 61 63 6b 26 26 28 61 2e 6d 64 78 3d 22 31 22 29 3b 61 2e 76 76 74 26 26 28 61 2e 76 73 73 5f 63 72 65 64 65 6e 74 69 61 6c 73 5f 74 6f 6b 65 6e 3d 61 2e 76 76 74 2c 63 2e 53 6e 26 26 28 61 2e 76 73 73 5f 63 72 65 64 65 6e 74 69 61 6c 73 5f 74 6f 6b 65 6e 5f 74 79 70 65 3d 63 2e 53 6e 29 2c 63 2e 6d 64 78 45 6e 76 69 72 6f 6e 6d 65 6e 74 26 26 28 61 2e 6d 64 78 5f 65 6e 76 69 72 6f 6e 6d 65 6e 74 3d 63 2e 6d 64 78 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 29 3b 69 4b 28 61 2c 65 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 41 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 4d 61 70 3b 61 3d 67 2e 77 Data Ascii: &&(a.ytr=c.fk);c.vx&&(a.ytrcc=c.vx);c.isMdxPlayback&&(a.mdx="1");a.vvt&&(a.vss_credentials_token=a.vvt,c.Sn&&(a.vss_credentials_token_type=c.Sn),c.mdxEnvironment&&(a.mdx_environment=c.mdxEnvironment));iK(a,e);return a};AAa=function(a){var b=new Map;a=g.w
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 76 65 6e 74 2c 4d 2c 63 2c 64 2c 66 2c 6e 2c 61 2c 48 2c 72 2c 74 29 3a 45 41 61 28 43 2c 41 2e 61 64 53 6c 6f 74 4d 65 74 61 64 61 74 61 2e 74 72 69 67 67 65 72 45 76 65 6e 74 2c 4d 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 2c 6c 2c 6d 2c 6e 2c 61 2c 70 2c 48 2c 41 2e 61 64 53 6c 6f 74 4d 65 74 61 64 61 74 61 2e 74 72 69 67 67 65 72 69 6e 67 53 6f 75 72 63 65 4c 61 79 6f 75 74 49 64 29 3b 69 66 28 48 20 69 6e 73 74 61 6e 63 65 6f 66 0a 5a 29 72 65 74 75 72 6e 20 48 3b 4d 3d 5b 5d 3b 75 4b 28 41 29 26 26 4d 2e 70 75 73 68 28 6e 65 77 20 44 44 28 7b 53 75 3a 75 4b 28 41 29 26 26 21 21 41 2e 73 6c 6f 74 45 6e 74 72 79 54 72 69 67 67 65 72 2e 62 65 66 6f 72 65 43 6f 6e 74 65 6e 74 56 69 64 65 6f 49 64 53 74 61 72 74 65 64 54 72 69 67 67 65 72 7d 29 29 3b 4c 26 26 Data Ascii: vent,M,c,d,f,n,a,H,r,t):EAa(C,A.adSlotMetadata.triggerEvent,M,b,c,d,e,f,h,l,m,n,a,p,H,A.adSlotMetadata.triggeringSourceLayoutId);if(H instanceofZ)return H;M=[];uK(A)&&M.push(new DD({Su:uK(A)&&!!A.slotEntryTrigger.beforeContentVideoIdStartedTrigger}));L&&
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 4c 6f 67 67 69 6e 67 44 61 74 61 7d 29 7d 65 6c 73 65 20 45 3d 6e 65 77 20 5a 28 22 44 69 73 6d 69 73 73 61 62 6c 65 50 61 6e 65 6c 54 65 78 74 50 6f 72 74 72 61 69 74 49 6d 61 67 65 52 65 6e 64 65 72 65 72 20 69 73 20 6d 69 73 73 69 6e 67 22 29 3b 65 6c 73 65 20 45 3d 6e 65 77 20 5a 28 22 53 71 75 65 65 7a 65 62 61 63 6b 50 6c 61 79 65 72 53 69 64 65 50 61 6e 65 6c 52 65 6e 64 65 72 65 72 20 69 73 20 6d 69 73 73 69 6e 67 22 29 3b 65 6c 73 65 20 57 2e 61 64 4c 61 79 6f 75 74 4d 65 74 61 64 61 74 61 2e 6c 61 79 6f 75 74 54 79 70 65 3d 3d 3d 22 4c 41 59 4f 55 54 5f 54 59 50 45 5f 44 49 53 50 4c 41 59 5f 54 52 41 43 4b 49 4e 47 22 3f 28 4d 3d 57 2c 67 2e 52 28 4d 2e 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 2c 72 7a 61 29 3f 28 57 3d 7b 6c 61 79 6f 75 Data Ascii: LoggingData})}else E=new Z("DismissablePanelTextPortraitImageRenderer is missing");else E=new Z("SqueezebackPlayerSidePanelRenderer is missing");else W.adLayoutMetadata.layoutType==="LAYOUT_TYPE_DISPLAY_TRACKING"?(M=W,g.R(M.renderingContent,rza)?(W={layou
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 79 6f 75 74 54 79 70 65 20 5b 22 2b 57 2e 61 64 4c 61 79 6f 75 74 4d 65 74 61 64 61 74 61 2e 6c 61 79 6f 75 74 54 79 70 65 2b 22 5d 20 69 73 20 69 6e 76 61 6c 69 64 20 66 6f 72 20 50 6c 61 79 65 72 55 6e 64 65 72 6c 61 79 53 6c 6f 74 22 29 3b 69 66 28 45 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 29 72 65 74 75 72 6e 20 45 3b 41 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 43 2c 7b 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 3a 6e 65 77 20 4a 44 28 5b 5d 29 2c 66 75 6c 66 69 6c 6c 65 64 4c 61 79 6f 75 74 3a 45 2c 61 64 53 6c 6f 74 4c 6f 67 67 69 6e 67 44 61 74 61 3a 41 2e 61 64 53 6c 6f 74 4d 65 74 61 64 61 74 61 2e 61 64 53 6c 6f 74 4c 6f 67 67 69 6e 67 44 61 74 61 7d 29 3b 75 2e 70 75 73 68 28 41 29 7d 65 6c 73 65 20 69 66 28 45 3d 67 2e 52 28 41 2e Data Ascii: youtType ["+W.adLayoutMetadata.layoutType+"] is invalid for PlayerUnderlaySlot");if(E instanceof Z)return E;A=Object.assign({},C,{clientMetadata:new JD([]),fulfilledLayout:E,adSlotLoggingData:A.adSlotMetadata.adSlotLoggingData});u.push(A)}else if(E=g.R(A.
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 30 26 26 63 2e 70 75 73 68 28 6e 65 77 20 55 43 28 68 29 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6c 2c 7b 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 3a 61 2e 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 2c 41 62 3a 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 48 41 61 28 61 29 5d 5d 29 7d 2c 62 2c 7b 56 62 3a 51 44 28 64 2c 65 29 28 6c 29 2c 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 3a 6e 65 77 20 4a 44 28 63 29 2c 61 64 4c 61 79 6f 75 74 4c 6f 67 67 69 6e 67 44 61 74 61 3a 61 2e 61 64 4c 61 79 6f 75 74 4d 65 74 61 64 61 74 61 2e 61 64 4c 61 79 6f 75 74 4c 6f 67 67 69 6e 67 44 61 74 61 7d 29 7d 3b 0a 44 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 2c 6c 2c Data Ascii: 0&&c.push(new UC(h));return Object.assign({},l,{renderingContent:a.renderingContent,Ab:new Map([["impression",HAa(a)]])},b,{Vb:QD(d,e)(l),clientMetadata:new JD(c),adLayoutLoggingData:a.adLayoutMetadata.adLayoutLoggingData})};DAa=function(a,b,c,d,e,f,h,l,
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 22 7d 3b 4c 3d 4c 41 61 28 4d 2c 48 2c 4c 2c 45 29 3b 4c 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 3f 43 3d 4c 3a 28 43 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 59 2c 79 4b 2c 7b 41 62 3a 51 2c 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 3a 48 2e 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 2c 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 3a 6e 65 77 20 4a 44 28 4c 29 2c 56 62 3a 51 44 28 56 2c 43 29 28 59 29 2c 61 64 4c 61 79 6f 75 74 4c 6f 67 67 69 6e 67 44 61 74 61 3a 48 2e 61 64 4c 61 79 6f 75 74 4d 65 74 61 64 61 74 61 2e 61 64 4c 61 79 6f 75 74 4c 6f 67 67 69 6e 67 44 61 74 61 7d 29 2c 0a 43 3d 28 48 3d 7a 4b 28 58 2c 43 2c 45 2c 57 2e 44 6b 2c 56 2c 63 61 2c 6d 61 29 29 3f 48 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 3f 48 3a 7b 6c 61 79 Data Ascii: "};L=LAa(M,H,L,E);L instanceof Z?C=L:(C=Object.assign({},Y,yK,{Ab:Q,renderingContent:H.renderingContent,clientMetadata:new JD(L),Vb:QD(V,C)(Y),adLayoutLoggingData:H.adLayoutMetadata.adLayoutLoggingData}),C=(H=zK(X,C,E,W.Dk,V,ca,ma))?H instanceof Z?H:{lay
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 3f 65 3a 7b 6c 61 79 6f 75 74 3a 61 2c 7a 65 3a 65 7d 3a 6e 65 77 20 5a 28 22 45 78 70 65 63 74 69 6e 67 20 61 73 73 6f 63 69 61 74 65 64 49 6e 50 6c 61 79 65 72 53 6c 6f 74 22 29 7d 3b 0a 45 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 2c 6c 2c 6d 2c 6e 2c 70 2c 71 2c 72 2c 74 2c 75 2c 79 29 7b 76 61 72 20 41 3d 76 4b 28 63 2c 66 2c 65 2e 44 6b 29 3b 69 66 28 41 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 29 72 65 74 75 72 6e 20 41 3b 69 66 28 67 2e 52 28 63 2e 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 2c 50 4a 29 29 7b 6d 3d 4d 41 61 28 5b 63 5d 2c 65 2c 6d 29 3b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 29 72 65 74 75 72 6e 20 6d 3b 69 66 28 6d 2e 6c 65 6e 67 74 68 21 3d 3d Data Ascii: instanceof Z?e:{layout:a,ze:e}:new Z("Expecting associatedInPlayerSlot")};EAa=function(a,b,c,d,e,f,h,l,m,n,p,q,r,t,u,y){var A=vK(c,f,e.Dk);if(A instanceof Z)return A;if(g.R(c.renderingContent,PJ)){m=MAa([c],e,m);if(m instanceof Z)return m;if(m.length!==
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 65 3a 56 2e 61 64 4c 61 79 6f 75 74 4d 65 74 61 64 61 74 61 2e 6c 61 79 6f 75 74 54 79 70 65 2c 58 61 3a 22 61 64 61 70 74 65 72 22 7d 3b 58 3d 45 72 28 58 2e 70 6c 61 79 65 72 56 61 72 73 29 3b 58 2e 61 75 74 6f 70 6c 61 79 3d 22 31 22 3b 56 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 51 2c 79 4b 2c 7b 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 3a 56 2e 72 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 6e 74 2c 63 6c 69 65 6e 74 4d 65 74 61 64 61 74 61 3a 6e 65 77 20 4a 44 28 5b 6e 65 77 20 6b 44 28 7b 7d 29 2c 6e 65 77 20 43 43 28 7b 6b 69 6e 64 3a 22 41 44 5f 50 4c 41 43 45 4d 45 4e 54 5f 4b 49 4e 44 5f 53 54 41 52 54 22 7d 29 2c 6e 65 77 20 5a 43 28 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 29 2c 6e 65 77 20 64 44 28 58 29 5d 29 2c 41 62 3a 6e Data Ascii: e:V.adLayoutMetadata.layoutType,Xa:"adapter"};X=Er(X.playerVars);X.autoplay="1";V=Object.assign({},Q,yK,{renderingContent:V.renderingContent,clientMetadata:new JD([new kD({}),new CC({kind:"AD_PLACEMENT_KIND_START"}),new ZC({current:null}),new dD(X)]),Ab:n

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.10	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225052Z-16849878b78k46f8kzwxznephs00000006ng00000000txu3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.10	49897	64.246.164.140	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	581	OUT	GET /service/v1/branding/bypass/google/1234567/google_bypass.js?send_from_agent=true&from_aws=true&from_app=aws%3Ahttps%3A%2F%2Fkristalittle.com&source=agent%20website&source_display_name=Agent%20Website&site_type=Agent%20Website&_=1729723842528 HTTP/1.1 Host: svc.moxiworks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:52 UTC	287	IN	HTTP/1.1 200 OK date: Wed, 23 Oct 2024 22:50:52 GMT content-type: application/javascript content-length: 33948 server: nginx last-modified: Fri, 23 Feb 2024 00:08:39 GMT etag: "65d7e207-849c" accept-ranges: bytes x-app-server: wms_svc_branding/internal-k8s connection: close
2024-10-23 22:50:52 UTC	16384	IN	Data Raw: 2f 2f 53 61 76 65 64 20 2d 20 31 38 30 30 20 6c 69 6e 65 73 20 6f 6e 20 3a 20 73 76 63 31 36 2d 70 72 20 3a 20 32 30 32 34 2d 30 31 2d 31 36 20 31 39 3a 33 39 3a 31 31 20 2d 30 38 30 30 0a 76 61 72 20 67 6f 6f 67 6c 65 5f 62 79 70 61 73 73 20 3d 20 5b 0d 0a 20 20 7b 0d 0a 20 20 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 37 2e 35 39 38 34 35 35 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 31 34 36 30 38 32 34 30 30 30 30 30 30 31 2c 0d 0a 20 20 20 20 6e 61 6d 65 3a 20 22 4c 61 6b 65 20 48 69 6c 6c 73 2c 20 42 65 6c 6c 65 76 75 65 2c 20 57 41 22 2c 0d 0a 20 20 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 20 20 7a 6f 6f 6d 3a 20 2d 31 2c 0d 0a 20 20 20 20 62 6f 75 6e 64 73 Data Ascii: //Saved - 1800 lines on : svc16-pr : 2024-01-16 19:39:11 -0800var google_bypass = [ { geospatial: true, lat: 47.5984551, lon: -122.14608240000001, name: "Lake Hills, Bellevue, WA", type: "Solutions", zoom: -1, bounds
2024-10-23 22:50:53 UTC	16384	IN	Data Raw: 61 6c 64 2d 4a 6f 68 6e 73 6f 6e 20 43 72 65 65 6b 2c 20 50 6f 72 74 6c 61 6e 64 2c 20 4f 52 22 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 35 2e 34 35 37 31 37 37 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 36 32 36 31 33 30 33 2c 0d 0a 20 20 20 20 74 79 70 65 3a 20 22 4e 65 69 67 68 62 6f 72 68 6f 6f 64 22 2c 0d 0a 20 20 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 7a 6f 6f 6d 3a 20 2d 31 0d 0a 20 20 7d 2c 0d 0a 20 20 7b 0d 0a 20 20 20 20 6e 61 6d 65 3a 20 22 41 72 64 65 6e 77 61 6c 64 20 4a 6f 68 6e 73 6f 6e 20 43 72 65 65 6b 2c 20 50 6f 72 74 6c 61 6e 64 2c 20 4f 52 22 2c 0d 0a 20 20 20 20 6c 61 74 3a 20 34 35 2e 34 35 37 31 37 37 31 2c 0d 0a 20 20 20 20 6c 6f 6e 3a 20 2d 31 32 32 2e 36 32 36 31 33 30 33 2c 0d 0a 20 Data Ascii: ald-Johnson Creek, Portland, OR", lat: 45.4571771, lon: -122.6261303, type: "Neighborhood", geospatial: true, zoom: -1 }, { name: "Ardenwald Johnson Creek, Portland, OR", lat: 45.4571771, lon: -122.6261303,
2024-10-23 22:50:53 UTC	1180	IN	Data Raw: 65 6e 69 78 2c 20 41 5a 2c 20 55 53 41 22 2c 0d 0a 20 20 6c 61 74 3a 20 33 33 2e 34 38 30 34 36 37 32 2c 0d 0a 20 20 6c 6f 6e 3a 20 2d 31 31 32 2e 30 37 37 34 34 35 30 39 39 39 39 39 39 38 2c 0d 0a 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 67 65 6f 73 70 61 74 69 61 6c 3a 20 74 72 75 65 2c 0d 0a 20 20 7a 6f 6f 6d 3a 20 2d 31 0d 0a 7d 2c 0d 0a 7b 0d 0a 20 20 6e 61 6d 65 3a 20 22 45 73 74 72 65 6c 6c 61 20 56 69 6c 6c 61 67 65 2c 20 50 68 6f 65 6e 69 78 2c 20 41 5a 2c 20 55 53 41 22 2c 0d 0a 20 20 6c 61 74 3a 20 33 33 2e 34 33 30 34 30 32 36 2c 0d 0a 20 20 6c 6f 6e 3a 20 2d 31 31 32 2e 32 30 32 36 33 34 36 39 39 39 39 39 39 38 2c 0d 0a 20 20 74 79 70 65 3a 20 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 20 20 67 65 6f 73 70 61 74 Data Ascii: enix, AZ, USA", lat: 33.4804672, lon: -112.07744509999998, type: "Solutions", geospatial: true, zoom: -1},{ name: "Estrella Village, Phoenix, AZ, USA", lat: 33.4304026, lon: -112.20263469999998, type: "Solutions", geospat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.10	49895	172.217.18.4	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	939	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdmtrYUAAAAAAHk0DIYZUZov8ZzYGbtAIozmHtV&co=aHR0cHM6Ly9rcmlzdGFsaXR0bGUuY29tOjQ0Mw..&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=invisible&cb=9ld3bvx247hf HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIlaHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://kristalittle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:50:52 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 22:50:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-43QcxdQa61jGELJLReeKag' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:50:52 UTC	217	IN	Data Raw: 35 37 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57f7<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 34 33 51 63 78 64 51 61 36 31 6a 47 45 4c 4a 4c 52 65 65 4b 61 67 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js" nonce="43QcxdQa61jGELJLReeKag"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 41 6b 6a 65 79 67 48 6f 69 78 70 48 4b 66 49 51 36 78 50 62 50 61 53 36 7a 6e 4a 50 6f 71 59 36 51 44 4e 44 71 32 63 30 39 54 6c 6b 6b 4a 31 73 46 45 65 30 4e 65 4d 49 4b 71 6b 35 6a 73 54 4a 39 4e 36 56 6e 4c 2d 5a 7a 52 36 41 73 78 65 63 35 70 35 65 4e 30 57 35 4d 6f 49 46 45 77 46 59 65 46 71 64 53 41 6f 61 31 4b 6f 66 37 36 38 37 6d 33 36 39 5a 65 43 44 6c 58 30 2d 7a 71 49 4c 66 34 5f 47 7a 4d 66 59 72 63 6a 45 46 69 31 34 72 44 7a 7a 46 77 50 49 70 45 74 79 52 2d 42 4f 53 32 78 42 4a 70 45 5a 74 6d 4b 47 58 70 59 53 78 42 6a 32 66 55 32 70 43 71 43 63 64 5a 49 31 34 31 62 69 32 5f 5a 32 78 6c 2d 71 6a 78 65 45 4c 51 4d 4f 6e 4e 2d 7a 70 72 63 49 37 31 4d 4f 50 4d 49 75 4e 68 6e 57 62 41 57 45 45 70 44 55 38 59 78 35 6f 65 79 37 45 67 71 32 4c 45 34 Data Ascii: AkjeygHoixpHKfIQ6xPbPaS6znJPoqY6QDNDq2c09TlkkJ1sFEe0NeMIKqk5jsTJ9N6VnL-ZzR6Asxec5p5eN0W5MoIFEwFYeFqdSAoa1Kof7687m369ZeCDlX0-zqILf4_GzMfYrcjEFi14rDzzFwPIpEtyR-BOS2xBJpEZtmKGXpYSxBj2fU2pCqCcdZI141bi2_Z2xl-qjxeELQMOnN-zprcI71MOPMIuNhnWbAWEEpDU8Yx5oey7Egq2LE4
2024-10-23 22:50:52 UTC	1378	IN	Data Raw: 52 74 54 6d 56 76 4f 55 78 6c 54 31 4e 6f 61 32 39 51 5a 46 5a 78 61 45 35 68 5a 6c 46 32 54 54 4e 77 62 44 6c 47 57 48 5a 69 57 43 73 31 65 6d 52 30 4f 45 4e 70 54 48 42 54 62 44 42 70 55 55 39 36 4d 57 59 72 61 45 55 78 51 6e 42 58 54 57 56 70 52 47 78 4e 56 30 46 78 5a 45 74 4d 55 6b 4a 30 4d 69 74 70 65 6e 6c 47 57 57 67 34 53 45 78 78 56 6d 6c 56 54 45 4e 58 63 57 35 70 53 6e 6c 51 62 45 34 32 61 33 52 43 53 57 68 4a 5a 33 4e 4b 64 47 64 58 61 56 4d 35 52 33 5a 73 4e 56 68 59 54 46 6c 4b 52 47 31 4a 4b 32 70 79 56 6a 4a 4e 57 6c 6b 33 5a 55 52 75 61 32 4a 58 63 47 56 32 54 33 70 6f 55 56 41 30 62 57 56 32 5a 47 35 5a 4e 31 59 30 61 6d 56 6a 51 31 5a 6e 52 46 68 34 4e 43 74 7a 5a 44 42 58 54 56 52 61 63 7a 42 35 54 48 4a 49 63 33 63 72 59 57 31 61 53 Data Ascii: RtTmVvOUxlT1Noa29QZFZxaE5hZlF2TTNwbDlGWHZiWCs1emR0OENpTHBTbDBpUU96MWYraEUxQnBXTWVpRGxNV0FxZEtMUkJ0MitpenlGWWg4SExxVmlVTENXcW5pSnlQbE42a3RCSWhJZ3NKdGdXaVM5R3ZsNVhYTFlKRG1JK2pyVjJNWlk3ZURua2JXcGV2T3poUVA0bWV2ZG5ZN1Y0amVjQ1ZnRFh4NCtzZDBXTVRaczB5THJIc3crYW1aS
2024-10-23 22:50:53 UTC	1378	IN	Data Raw: 64 55 35 44 52 7a 64 61 65 6a 64 6a 4d 6b 4a 31 4d 32 4e 4f 63 33 6c 44 51 56 45 32 59 6a 4e 77 59 57 68 57 59 33 52 4e 56 6a 51 30 52 58 68 6c 52 57 46 32 55 47 31 76 56 45 70 7a 5a 45 4e 57 51 32 38 32 55 6b 78 46 52 6e 5a 75 53 45 68 4e 61 57 78 79 52 6a 5a 78 53 32 31 6c 54 46 68 46 55 54 64 6c 53 54 4a 6e 4d 44 56 36 59 30 38 34 59 54 46 48 4d 47 6c 54 4d 6b 6c 54 63 30 5a 30 4e 6b 5a 36 63 53 39 31 53 58 49 7a 4e 45 4d 79 63 31 52 4d 55 6d 56 72 53 58 70 73 4f 55 38 33 63 47 6c 6c 62 44 4a 74 53 58 6c 79 4e 47 56 74 65 6d 64 71 65 48 52 69 63 6d 35 76 55 55 73 34 55 33 41 78 64 7a 6c 56 4f 57 46 45 62 6b 68 7a 59 55 6b 32 59 57 35 75 63 33 5a 59 4f 56 5a 53 65 6e 52 46 5a 54 4e 51 4e 7a 55 7a 56 45 52 4f 55 6a 59 30 57 6b 70 58 54 30 6c 4e 54 54 6c Data Ascii: dU5DRzdaejdjMkJ1M2NOc3lDQVE2YjNwYWhWY3RNVjQ0RXhlRWF2UG1vVEpzZENWQ282UkxFRnZuSEhNaWxyRjZxS21lTFhFUTdlSTJnMDV6Y084YTFHMGlTMklTc0Z0NkZ6cS91SXIzNEMyc1RMUmVrSXpsOU83cGllbDJtSXlyNGVtemdqeHRicm5vUUs4U3AxdzlVOWFEbkhzYUk2YW5uc3ZYOVZSenRFZTNQNzUzVEROUjY0WkpXT0lNTTl

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.10	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:52 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:52 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225052Z-16849878b787c9z7hb8u9yysp000000006ug00000000x33d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:52 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.10	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:52 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225052Z-15b8d89586f8l5961kfst8fpb000000008eg000000007x9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:52 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.10	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:52 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e5d3cb58-101e-0046-3bf3-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225052Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b8g000000007egf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:52 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.10	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:52 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:53 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225053Z-15b8d89586fwzdd8urmg0p1ebs000000088g00000000s1xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:53 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.10	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:53 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:53 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 5a802a50-001e-0049-3f00-255bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225053Z-15b8d89586fwzdd8urmg0p1ebs00000008bg00000000cwyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:53 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.10	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:53 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:53 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4fe2bab2-201e-0071-71f2-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225053Z-r197bdfb6b4ld6jc5asqwvvz0w00000000q000000000vsmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:53 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.10	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:53 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:53 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:53 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: e5966728-801e-007b-2bf2-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225053Z-r197bdfb6b46gt25anfa5gg2fw00000002dg0000000042g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:50:53 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.10	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:50:53 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:50:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:50:53 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225053Z-16849878b782h9tt5z2wa5rfxg00000006qg00000000wnyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:50:53 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Target ID:	3
Start time:	18:50:28
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	18:50:31
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	18:50:34
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kristalittle.com/"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	18:50:57
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4528 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	18:50:57
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 --field-trial-handle=2024,i,7188270456373258415,10489816982591460324,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TLSCP7N
Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0
Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TLSCP7N
Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0
Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TLSCP7N
Source: https://kristalittle.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO&wmode=transparent&enablejsapi=1&rel=0

Source: https://kristalittle.com/	HTTP Parser: No favicon
Source: https://kristalittle.com/	HTTP Parser: No favicon
Source: https://kristalittle.com/	HTTP Parser: No favicon
Source: https://kristalittle.com/	HTTP Parser: No favicon

Source: https://kristalittle.com/	HTTP Parser: No <meta name="author".. found
Source: https://kristalittle.com/	HTTP Parser: No <meta name="author".. found
Source: https://kristalittle.com/	HTTP Parser: No <meta name="author".. found

Source: https://kristalittle.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://kristalittle.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://kristalittle.com/	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: (g.Ak(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Ak(c,"www.youtube.com"),d=c.toString()):(c=rwa(d),DE(c)&&(d=c));c=new g.xM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: 0?"http":"https";this.Ca=CE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|CE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=Gs(d,h,WJa):h&&(d="embedded");this.Ka=d;Yqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(XJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(XJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.oa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_185.6.dr	String found in binary or memory: <div class="responsive-media"><iframe title="YouTube video player" src="https://www.youtube.com/embed/OLbXnrg27yk?si=QlAAjVUZdvdJ8KZO" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen" data-mce-fragment="1"></iframe></div> equals www.youtube.com (Youtube)
Source: chromecache_199.6.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},kk:function(){e=Ab()},ud:function(){d()}}};var hc=la(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_275.6.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},lk:function(){e=zb()},ud:function(){d()}}};var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_164.6.dr	String found in binary or memory: So.prototype.Ia=function(){return this.C};var sna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Pbb=0,Qbb=0,Rbb=0;var ap;g.Uo=null;g.Wo=!1;g.bp=1;ap=Symbol("SIGNAL");g.cp={version:0,v_:0,Vm:!1,hg:void 0,fz:void 0,Hn:void 0,UL:0,mj:void 0,bv:void 0,cF:!1,zP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_164.6.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.ej(a,{hl:d})),this.Fd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Fd(g.BY(a.errorMessage)):this.Fd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.ej(c, equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Sf(a.errorCode,a.severity,e,YF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Hd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.eu)(),sT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Hd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_164.6.dr	String found in binary or memory: a.ismb);this.yq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=WP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Yn=r;XP(this,a,!0);this.Ja=new pP;g.P(this,this.Ja);q=b?b.innertubeApiKey:Is("",a.innertube_api_key);p=b?b.innertubeApiVersion:Is("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:Is("",a.innertube_context_client_version);q=g.wr("INNERTUBE_API_KEY")\|\|q;p=g.wr("INNERTUBE_API_VERSION")\|\|p;l=g.wr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=hP(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_164.6.dr	String found in binary or memory: aJa=function(a,b){if(!a.j["0"]){var c=new pG("0","fakesb",{video:new lG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new QN(new g.xM("http://www.youtube.com/videoplayback"),c,"fake"):new gO(new g.xM("http://www.youtube.com/videoplayback"),c,new BN(0,0),new BN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.aQ(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.VR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.UE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_261.6.dr, chromecache_188.6.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_261.6.dr, chromecache_188.6.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: g.aQ=function(a){a=WP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_164.6.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.aQ(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.SP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),yu&&(a=ina())&&(b.ebc=a));return g.ej(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: g.nQ=function(a){var b=g.aQ(a);gKa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_199.6.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={oh:e,mh:f,nh:g,Yh:k,Zh:m,Ie:n,Eb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(wD(w,"iframe_api")\|\|wD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!nD&&uD(x[A],p.Ie))return yc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_275.6.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={rh:e,ph:f,qh:g,bi:k,di:m,Je:n,Fb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(AD(w,"iframe_api")\|\|AD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!rD&&yD(x[A],p.Je))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_260.6.dr	String found in binary or memory: if('Click - Share Facebook'==action){BOAT.facebookShareCallbacks.forEach(function(callback){callback();});}else if('Click - Share Twitter'==action){BOAT.twitterShareCallbacks.forEach(function(callback){callback();});}else if('Click Calculate Commute'==action){BOAT.driveTimeCallbacks.forEach(function(callback){callback(val);});}},socialShare:function(service,url,addr,display_name){display_name=encodeURIComponent(display_name\|\|"");if(service==="facebook"){return window.open("https://www.facebook.com/sharer.php?u="+url,"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");}else{if(service==="twitter"){return window.open("https://twitter.com/share?text="+display_name+" - "+addr+"&url="+url,"TwitterWin","width=580,height=410,left=10,top=10,resizable=yes");}}},facebookShare:function(url){return window.open("https://www.facebook.com/sharer.php?u="+encodeURIComponent(url),"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");},dollarFormat:function(number){if(number===null){return"";} equals www.facebook.com (Facebook)
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: if('Click - Share Facebook'==action){BOAT.facebookShareCallbacks.forEach(function(callback){callback();});}else if('Click - Share Twitter'==action){BOAT.twitterShareCallbacks.forEach(function(callback){callback();});}else if('Click Calculate Commute'==action){BOAT.driveTimeCallbacks.forEach(function(callback){callback(val);});}},socialShare:function(service,url,addr,display_name){display_name=encodeURIComponent(display_name\|\|"");if(service==="facebook"){return window.open("https://www.facebook.com/sharer.php?u="+url,"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");}else{if(service==="twitter"){return window.open("https://twitter.com/share?text="+display_name+" - "+addr+"&url="+url,"TwitterWin","width=580,height=410,left=10,top=10,resizable=yes");}}},facebookShare:function(url){return window.open("https://www.facebook.com/sharer.php?u="+encodeURIComponent(url),"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");},dollarFormat:function(number){if(number===null){return"";} equals www.twitter.com (Twitter)
Source: chromecache_260.6.dr	String found in binary or memory: if(jQuery.fn.IsSiteOwnerWindermereAgent()){jQuery('div.wp-submenu a:contains("Training Videos")').attr({target:'_blank',href:'https://www.youtube.com/playlist?list=PLc13JuWdUfyAeG5cvsLe5FLEFvtgb12C9'});}else{jQuery('div.wp-submenu a:contains("Training Videos")').attr({target:'_blank',href:'https://www.youtube.com/playlist?list=PLc13JuWdUfyAeG5cvsLe5FLEFvtgb12C9'});}} equals www.youtube.com (Youtube)
Source: chromecache_170.6.dr, chromecache_260.6.dr	String found in binary or memory: return _ths.openShareWindow("http://www.facebook.com/sharer.php?s=100&p[url]="+encodeURIComponent(url)+"&p[title]="+encodeURIComponent(title)+"&p[images][0]="+encodeURIComponent(image)+"&p[summary]="+encodeURIComponent(summary));}}});};SreHelper.prototype.openShareWindow=function(uri){return window.open(uri,"SearchPopUpWindow","width=580,height=410,left=10,top=10,resizable=yes");};SreHelper.prototype.googleTrackEvent=function(arg1,arg2,arg3){var tracking_array,_arg1,_arg2,_arg3;tracking_array=[arg1,arg2,arg3];log("Google Analytics Tracking",tracking_array);if(typeof _gaq!=="undefined"){_arg1=arg1\|\|"";_arg2=arg2\|\|"";_arg3=arg3\|\|"";return _gaq.push(['_trackEvent',_arg1,_arg2,_arg3]);}};SreHelper.prototype.toBoolean=function(str){str=str\|\|"";str=$.trim(str.toString().toLowerCase());switch(str){case"true":return true;case"yes":return true;case"1":return true;case"false":return false;case"no":return false;case"0":return false;case"":return false;case null:return false;default:return Boolean(str);}};SreHelper.prototype.isMLSPattern=function(str){var digitLength,regEx,strLength;regEx=new RegExp("^[a-z0-9-_]+$");str=str\|\|"";str=str.toLowerCase();strLength=str.length;digitLength=str.replace(/[^0-9]/g,"").length;if(regEx.test(str)){if(strLength===digitLength&&digitLength===5){return false;}else if(digitLength>=4&&strLength>=5){return true;}else{return false;}}else{return false;}};SreHelper.prototype.preLoadImages=function(files,cb){var i,img,_count,_counter,_interval;_count=files.length;_counter=0;i=0;while(i<files.length){img=new Image();img.src=files[i];$(img).load(function(){return _counter++;});i++;} equals www.facebook.com (Facebook)
Source: chromecache_205.6.dr, chromecache_215.6.dr	String found in binary or memory: return b}jD.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_260.6.dr	String found in binary or memory: sqft_top=WMS.options.cma?28:58;$_("input[name=sqft_min], input[name=sqft_max]").moxiComboBox({livequery:true,prelabel:"No Max",postlabel:"No Max",containercss:{top:sqft_top},integer:{start:100,end:10000,append:" SF"}});return false;};SreHelper.prototype.socialShare=function(service,url,addr){if(service==="facebook"){return window.open("http://www.facebook.com/sharer.php?u="+url,"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");}else{if(service==="twitter"){return window.open("http://twitter.com/share?text=Windermere - Listing Detail - "+addr+"&url="+url,"TwitterWin","width=580,height=410,left=10,top=10,resizable=yes");}}};SreHelper.prototype.facebookShare=function(url,clickedObj,title,image){var summary;title="Windermere \| Listing Detail \| "+title;summary=$(clickedObj).children("div").html();return window.open("http://www.facebook.com/sharer.php?s=100&p[url]="+encodeURIComponent(url)+"&p[title]="+encodeURIComponent(title)+"&p[images][0]="+encodeURIComponent(image)+"&p[summary]="+encodeURIComponent(summary),"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");};SreHelper.prototype.shareByListingId=function(id,service){var base_qs,uuid,_ths,_this=this;_ths=this;uuid=SRE.auth.uuid!=null?SRE.auth.uuid:"";base_qs=(!WMS.options.cma?"":"/"+$_("body").attr("data-agenttoken")+"/cma");return $.ajax({url:WMS.listing_service+base_qs+'/'+id+"?user_uuid="+uuid+"&company_uuid="+$_("body").attr("data-companytoken"),async:false,success:function(res){var image,summary,title,url,_addr,_listing,_meta_found;_listing=res.data.result_list[0];url=$_("body").attr("data-sitebase")+'/listing/'+id;if(service==="twitter"){_addr=_listing.location.address+" "+_listing.location.city+", "+_listing.location.state;return _ths.openShareWindow("http://twitter.com/share?text=Windermere - Listing Detail - "+_addr+"&url="+url);}else if(service==="google+"){return _ths.openShareWindow('https://plus.google.com/share?url='+url);}else if(service==="facebook"){image=_listing.images[0].full_url+"&h=300&bg=353940";title="Windermere \| Listing Detail \| "+_listing.title;summary=_listing.sqr_footage+"sqft, "+_listing.bedrooms+"bd, "+_listing.bathrooms+"bth, MLS#"+_listing.mlsnumber+", "+_listing.comments;_meta_found=false;$.each($_("meta"),function(i,o){if($(o).attr("property")==="og:image"){return _meta_found=true;}});if(!_meta_found){$_("head").append('<meta property="og:image" content="'+image+'"/>');} equals www.facebook.com (Facebook)
Source: chromecache_260.6.dr	String found in binary or memory: sqft_top=WMS.options.cma?28:58;$_("input[name=sqft_min], input[name=sqft_max]").moxiComboBox({livequery:true,prelabel:"No Max",postlabel:"No Max",containercss:{top:sqft_top},integer:{start:100,end:10000,append:" SF"}});return false;};SreHelper.prototype.socialShare=function(service,url,addr){if(service==="facebook"){return window.open("http://www.facebook.com/sharer.php?u="+url,"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");}else{if(service==="twitter"){return window.open("http://twitter.com/share?text=Windermere - Listing Detail - "+addr+"&url="+url,"TwitterWin","width=580,height=410,left=10,top=10,resizable=yes");}}};SreHelper.prototype.facebookShare=function(url,clickedObj,title,image){var summary;title="Windermere \| Listing Detail \| "+title;summary=$(clickedObj).children("div").html();return window.open("http://www.facebook.com/sharer.php?s=100&p[url]="+encodeURIComponent(url)+"&p[title]="+encodeURIComponent(title)+"&p[images][0]="+encodeURIComponent(image)+"&p[summary]="+encodeURIComponent(summary),"NewFBWin","width=580,height=410,left=10,top=10,resizable=yes,scrollbars=yes");};SreHelper.prototype.shareByListingId=function(id,service){var base_qs,uuid,_ths,_this=this;_ths=this;uuid=SRE.auth.uuid!=null?SRE.auth.uuid:"";base_qs=(!WMS.options.cma?"":"/"+$_("body").attr("data-agenttoken")+"/cma");return $.ajax({url:WMS.listing_service+base_qs+'/'+id+"?user_uuid="+uuid+"&company_uuid="+$_("body").attr("data-companytoken"),async:false,success:function(res){var image,summary,title,url,_addr,_listing,_meta_found;_listing=res.data.result_list[0];url=$_("body").attr("data-sitebase")+'/listing/'+id;if(service==="twitter"){_addr=_listing.location.address+" "+_listing.location.city+", "+_listing.location.state;return _ths.openShareWindow("http://twitter.com/share?text=Windermere - Listing Detail - "+_addr+"&url="+url);}else if(service==="google+"){return _ths.openShareWindow('https://plus.google.com/share?url='+url);}else if(service==="facebook"){image=_listing.images[0].full_url+"&h=300&bg=353940";title="Windermere \| Listing Detail \| "+_listing.title;summary=_listing.sqr_footage+"sqft, "+_listing.bedrooms+"bd, "+_listing.bathrooms+"bth, MLS#"+_listing.mlsnumber+", "+_listing.comments;_meta_found=false;$.each($_("meta"),function(i,o){if($(o).attr("property")==="og:image"){return _meta_found=true;}});if(!_meta_found){$_("head").append('<meta property="og:image" content="'+image+'"/>');} equals www.twitter.com (Twitter)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(jP(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.MO(this.B)?LO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_286.6.dr, chromecache_164.6.dr	String found in binary or memory: var S2={};var Qeb={Gs:[{Fs:/Unable to load player module/,weight:20},{Fs:/Failed to fetch/,weight:500},{Fs:/XHR API fetch failed/,weight:10},{Fs:/JSON parsing failed after XHR fetch/,weight:10},{Fs:/Retrying OnePlatform request/,weight:10},{Fs:/CSN Missing or undefined during playback association/,weight:100},{Fs:/Non-recoverable error. Do not retry./,weight:0},{Fs:/Internal Error. Retry with an exponential backoff./,weight:0},{Fs:/API disabled by application./,weight:0}],Lr:[{callback:B8a,weight:500}]};var O8a=/[&\?]action_proxy=1/,N8a=/[&\?]token=([\w-])/,P8a=/[&\?]video_id=([\w-])/,Q8a=/[&\?]index=([\d-])/,R8a=/[&\?]m_pos_ms=([\d-])/,T8a=/[&\?]vvt=([\w-]*)/,F8a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),S8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),I8a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_246.6.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/a62d836d\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	DNS traffic detected: DNS query: kristalittle.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: svc.moxiworks.com
Source: global traffic	DNS traffic detected: DNS query: images.cloud.realogyprod.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: telize-v1.p.rapidapi.com
Source: global traffic	DNS traffic detected: DNS query: disutgh7q0ncc.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: eligibility.wootric.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: images-static.moxiworks.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://kristalittle.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Windows Analysis Report
http://kristalittle.com/