Edit tour

Windows Analysis Report
https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa

Overview

General Information

Sample URL:	https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa
Analysis ID:	1592049
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML page contains hidden javascript code

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2364,i,14294915167031781044,245127136332851644,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: UQUWRXUS

Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: Form action: https://brightmorningteam.activehosted.com/proc.php
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: Form action: https://brightmorningteam.activehosted.com/proc.php
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: Form action: https://brightmorningteam.activehosted.com/proc.php

Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No favicon
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No favicon

Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="author".. found
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="author".. found
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="author".. found

Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="copyright".. found
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="copyright".. found
Source: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49739 version: TLS 1.0

Source: unknown

HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49739 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa HTTP/1.1Host: brightmorningteam.acemlna.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa HTTP/1.1Host: brightmorningteam.activehosted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter HTTP/1.1Host: brightmorningteam.activehosted.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b9a06b09005a9b79715498452db0aa11; cmp1002421028=cac6fe7aae12600ddd5aad7d35539d3d; __cf_bm=CXxpCkriJkyztbw511PsFob4a8dfiIn0gxcMk4w4FEg-1736959597-1.0.1.1-BkXAykHCgwHNPIrxsbxGvonLIhp8DasUlErREFG543mcOf34W6nJC1aMasCVyj4zF6KDnmBcwkD9v6C810iigQ
Source: global traffic	HTTP traffic detected: GET /ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png HTTP/1.1Host: content.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css?family=open-sans:400,700 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diffuser/diffuser.js HTTP/1.1Host: diffuser-cdn.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=recaptcha_callback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://brightmorningteam.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.bunny.net/css?family=open-sans:400,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open-sans/files/open-sans-symbols-700-normal.woff2 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://brightmorningteam.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.bunny.net/css?family=open-sans:400,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open-sans/files/open-sans-symbols-400-normal.woff2 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://brightmorningteam.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.bunny.net/css?family=open-sans:400,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open-sans/files/open-sans-latin-700-normal.woff2 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://brightmorningteam.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.bunny.net/css?family=open-sans:400,700Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /diffuser/diffuser.js HTTP/1.1Host: diffuser-cdn.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=1002421028&u=https%3A%2F%2Fbrightmorningteam.activehosted.com%2Ff%2F158%3Fs%3Dc7bc722fa31ed07a45768c9be8733ff5%26nl%3D1%26c%3D1728%26m%3D9908%26utm_source%3DActiveCampaign%26utm_medium%3Demail%26utm_content%3DNeuroscience%2520tips%2520for%2520better%2520team%2520leadership%26utm_campaign%3DM%252C%25201%252F13%252F25%2520-%2520Newsletter HTTP/1.1Host: prism.app-us1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png HTTP/1.1Host: content.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=recaptcha_callback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?a=1002421028&u=https%3A%2F%2Fbrightmorningteam.activehosted.com%2Ff%2F158%3Fs%3Dc7bc722fa31ed07a45768c9be8733ff5%26nl%3D1%26c%3D1728%26m%3D9908%26utm_source%3DActiveCampaign%26utm_medium%3Demail%26utm_content%3DNeuroscience%2520tips%2520for%2520better%2520team%2520leadership%26utm_campaign%3DM%252C%25201%252F13%252F25%2520-%2520Newsletter HTTP/1.1Host: prism.app-us1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: prism_1002421028=665e1bfa-4f19-41c8-beed-eee1a7a78791
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfz HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.278.2.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://brightmorningteam.activehosted.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/favicon.ico HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://brightmorningteam.activehosted.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-spa-1.278.2.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/favicon.ico HTTP/1.1Host: d3rxaij56vjege.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=10822&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605&af=err,spa,xhr,stn,ins&ap=322&be=2643&fe=7361&dc=1116&at=HxVHFgsdRU4UBRZfSBlK&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736959595292,%22n%22:0,%22f%22:1713,%22dn%22:1716,%22dne%22:1716,%22c%22:1716,%22s%22:1717,%22ce%22:2175,%22rq%22:2175,%22rp%22:2643,%22rpe%22:2911,%22di%22:3758,%22ds%22:3758,%22de%22:3759,%22dc%22:9998,%22l%22:9998,%22le%22:10004%7D,%22navigation%22:%7B%7D%7D&fp=3767&fcp=3767 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=11489&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41493&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41499&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=71509&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: brightmorningteam.acemlna.com
Source: global traffic	DNS traffic detected: DNS query: brightmorningteam.activehosted.com
Source: global traffic	DNS traffic detected: DNS query: fonts.bunny.net
Source: global traffic	DNS traffic detected: DNS query: content.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: diffuser-cdn.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: prism.app-us1.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: d3rxaij56vjege.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net

Source: chromecache_63.2.dr	String found in binary or memory: https://brightmorningteam.activehosted.com/proc.php
Source: chromecache_63.2.dr	String found in binary or memory: https://brightmorningteam.activehosted.com/proc.php?
Source: chromecache_63.2.dr	String found in binary or memory: https://brightmorningteam.activehosted.com/proc.php?jsonp=true
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_63.2.dr	String found in binary or memory: https://d226aj4ao1t61q.cloudfront.net/haao08fw5_ac_symbol_blue.png
Source: chromecache_63.2.dr	String found in binary or memory: https://d3rxaij56vjege.cloudfront.net/media/favicon.ico
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_63.2.dr	String found in binary or memory: https://diffuser-cdn.app-us1.com/diffuser/diffuser.js
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.bunny.net/css?family=open-sans:400
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-700-normal.woff)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-700-normal.woff2)
Source: chromecache_92.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_92.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_63.2.dr	String found in binary or memory: https://unpkg.com/intl-tel-input
Source: chromecache_63.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=recaptcha_callback&render=explicit
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr, chromecache_72.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_65.2.dr, chromecache_72.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: clean2.win@18/54@40/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2364,i,14294915167031781044,245127136332851644,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2364,i,14294915167031781044,245127136332851644,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://brightmorningteam.activehosted.com/proc.php?jsonp=true	0%	Avira URL Cloud	safe
https://d226aj4ao1t61q.cloudfront.net/haao08fw5_ac_symbol_blue.png	0%	Avira URL Cloud	safe
https://brightmorningteam.activehosted.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa	0%	Avira URL Cloud	safe
https://d3rxaij56vjege.cloudfront.net/media/favicon.ico	0%	Avira URL Cloud	safe
https://brightmorningteam.activehosted.com/proc.php	0%	Avira URL Cloud	safe
https://brightmorningteam.activehosted.com/proc.php?	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
brightmorningteam.activehosted.com	104.17.205.31	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	high
prism.app-us1.com	104.17.31.174	true	false	high
brightmorningteam.acemlna.com	54.82.80.250	true	false	high
content.app-us1.com	104.17.31.174	true	false	high
diffuser-cdn.app-us1.com	104.17.31.174	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
www.google.com	142.250.181.228	true	false	high
d3rxaij56vjege.cloudfront.net	18.245.45.143	true	false	high
bunnyfonts.b-cdn.net	169.150.236.105	true	false	high
fonts.bunny.net	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bam.nr-data.net/jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=71509&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605	false		high
https://bam.nr-data.net/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=10822&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605&af=err,spa,xhr,stn,ins&ap=322&be=2643&fe=7361&dc=1116&at=HxVHFgsdRU4UBRZfSBlK&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736959595292,%22n%22:0,%22f%22:1713,%22dn%22:1716,%22dne%22:1716,%22c%22:1716,%22s%22:1717,%22ce%22:2175,%22rq%22:2175,%22rp%22:2643,%22rpe%22:2911,%22di%22:3758,%22ds%22:3758,%22de%22:3759,%22dc%22:9998,%22l%22:9998,%22le%22:10004%7D,%22navigation%22:%7B%7D%7D&fp=3767&fcp=3767	false		high
https://prism.app-us1.com/?a=1002421028&u=https%3A%2F%2Fbrightmorningteam.activehosted.com%2Ff%2F158%3Fs%3Dc7bc722fa31ed07a45768c9be8733ff5%26nl%3D1%26c%3D1728%26m%3D9908%26utm_source%3DActiveCampaign%26utm_medium%3Demail%26utm_content%3DNeuroscience%2520tips%2520for%2520better%2520team%2520leadership%26utm_campaign%3DM%252C%25201%252F13%252F25%2520-%2520Newsletter	false		high
https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff2	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go	false		high
https://diffuser-cdn.app-us1.com/diffuser/diffuser.js	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF	false		high
https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa	false		unknown
https://bam.nr-data.net/jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41499&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605	false		high
https://bam.nr-data.net/events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41493&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff2	false		high
https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter	false		unknown
https://content.app-us1.com/ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png	false		high
https://d3rxaij56vjege.cloudfront.net/media/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfz	false		high
https://js-agent.newrelic.com/nr-spa-1.278.2.min.js	false		high
https://fonts.bunny.net/css?family=open-sans:400,700	false		high
https://bam.nr-data.net/events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=11489&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff2	false		high
https://brightmorningteam.activehosted.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-700-normal.woff2)	chromecache_83.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/css?family=open-sans:400	chromecache_63.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-700-normal.woff)	chromecache_83.2.dr	false		high
https://d226aj4ao1t61q.cloudfront.net/haao08fw5_ac_symbol_blue.png	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-700-normal.woff)	chromecache_83.2.dr	false		high
https://cloud.google.com/contact	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff2)	chromecache_83.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-700-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff)	chromecache_83.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr, chromecache_72.2.dr, chromecache_91.2.dr	false		high
https://brightmorningteam.activehosted.com/proc.php?jsonp=true	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-math-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2)	chromecache_83.2.dr	false		high
https://support.google.com/recaptcha	chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-math-700-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-700-normal.woff)	chromecache_83.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-hebrew-700-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-700-normal.woff)	chromecache_83.2.dr	false		high
https://unpkg.com/intl-tel-input	chromecache_63.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff2)	chromecache_83.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_92.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_80.2.dr, chromecache_86.2.dr, chromecache_92.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-700-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-greek-700-normal.woff2)	chromecache_83.2.dr	false		high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff)	chromecache_83.2.dr	false		high
https://brightmorningteam.activehosted.com/proc.php	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://fonts.bunny.net/open-sans/files/open-sans-hebrew-700-normal.woff2)	chromecache_83.2.dr	false		high
https://brightmorningteam.activehosted.com/proc.php?	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff2)	chromecache_83.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.45.143	d3rxaij56vjege.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.128.216	unknown	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
18.245.45.59	unknown	United States	16509	AMAZON-02US	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
169.150.236.105	bunnyfonts.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.82.80.250	brightmorningteam.acemlna.com	United States	14618	AMAZON-AESUS	false
104.17.205.31	brightmorningteam.activehosted.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
104.17.31.174	prism.app-us1.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592049
Start date and time:	2025-01-15 17:45:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@18/54@40/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.186.174, 64.233.184.84, 142.250.185.110, 199.232.214.172, 142.250.186.78, 2.17.190.73, 142.250.186.110, 142.250.185.106, 172.217.16.202, 142.250.186.170, 142.250.185.74, 216.58.206.74, 142.250.181.234, 142.250.186.74, 142.250.186.106, 142.250.184.234, 142.250.185.170, 142.250.185.202, 142.250.185.138, 142.250.74.202, 142.250.185.234, 142.250.186.42, 216.58.206.42, 142.250.185.131, 142.250.184.227, 142.250.186.99, 162.247.241.14, 142.250.185.206, 172.217.18.14, 142.250.185.238, 172.217.18.3, 2.22.50.144, 20.12.23.50, 2.23.242.162, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, bam.nr-data.net.cdn.cloudflare.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://brightmorningteam.acemlna.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true, "reasoning": "The domain 'acemlna.com' appears to be a third-party email marketing/automation platform. The TLD '.com' is common but the subdomain structure and unknown primary domain 'acemlna' could indicate a marketing automation or tracking system. While not necessarily malicious, it's a third-party hosted service rather than a direct company domain." }
URL: https://brightmorningteam.acemlna.com
URL: https://brightmorningteam.activehosted.com/f/158?s... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a form handling script that collects user data and sends it to a server. While there are no clear indications of malicious intent, the script exhibits some moderate-risk behaviors, such as external data transmission and the use of a large number of form fields. Further review may be necessary to ensure the data handling practices are transparent and secure." }
var params = {"id":"158","s":"c7bc722fa31ed07a45768c9be8733ff5","nl":"1","c":"1728","m":"9908","utm_source":"ActiveCampaign","utm_medium":"email","utm_content":"Neuroscience tips for better team leadership","utm_campaign":"M, 1\/13\/25 - Newsletter"}, fields = {"role":"1","tell_us_about_your_podcast_inquiry":"2","new_to_learning":"3","how_have_you_learned_before":"4","heard_about_bright_morning":"5","dh_anything_else_you_would_like_to_share":"6","city":"7","submission_category":"9","inquiry_priority":"10","message":"11","dh_interest_what_kind_of_offerings":"12","interest_which_of_our_collections_of_work":"13","dh_what_is_your_estimated_budget":"14","dh_estimated_number_of_attendees":"15","dh_what_are_the_roles":"16","dh_inperson_or_virtual_event":"17","dh_do_you_have_a_date_or_timeframe":"18","dh_how_much_time_do_you_have":"19","dh_name_of_event_and_theme":"20","dh_location_of_event":"21","dh_what_you_would_like_elena_to_speak_about":"22","role_type":"26","i_am_a":"28","how_did_you_hear_about_this_program":"29","im_interested_in":"30","im_looking_for_feel_better_strategies_as_a":"31","if_you_heard_about_feel_better_from_an_individual_enter_their_email_and_youll_both_be_entered_to_win_a_prize":"32","which_collections_of_work_are_you_most_interested_in_check_all_that_apply":"33","preorder_where_did_you_purchase":"34","date_of_preorder_purchase":"35","preorder_confirmation_or_receipt":"36","newsletter_preference":"38","zip":"39","podcast_inquiry_type":"41","podcast_inquiry":"42","podcast_timeframe":"43","other_podcast":"44","have_you_participated_in_a_paid_bright_morning_learning_experience_this_calendar_year":"45","is_this_your_first_experience_with_bmc":"46","how_did_you_hear_about_this_webinar":"48","organizations_website_and_social_media_handles":"50","hubspot_interest_in_prerecorded_or_live_webinar":"51","interest_if_elena_is_not_available":"52","if_no_how_has_your_organization_learned_with_us":"53","which_statements_apply_to_your_large_group":"54","why_did_you_seek_out_consulting_with_bright_morning_what_are_you_hoping_to_achieve_through_this_partnership_what_will_success_lo":"55","why_do_you_think_bright_morning_consulting_would_be_a_good_match_for_your_needs":"56","close_date":"58","became_a_lead_date":"59","became_a_customer_date":"60","hubspot_survey_comments_on_the_presenters_knowledge":"61","hubspot_create_date":"63","first_deal_created_date":"64","hubspot_contact_owner":"65","hubspot_last_modified_date":"66","lifecycle_stage":"67","lead_status":"68","mobile_phone_number":"69","number_of_associated_deals":"70","number_of_sales_activities":"71","number_of_times_contacted":"72","number_of_form_submissions":"73","address_1":"74","facilitator":"75","email_of_billing_contact_for_invoice":"76","if_a_purchase_order_is_required_please_include_the_number_here":"77","lead_contact":"78","lead_contact_phone":"79","name_of_billing_contact_for_invoice":"80","hubspot_last_activity_date":"83","hubspot_last_contacted":"84","please_provide_the_email_address_to_whom_the_invoice_should_be_sent":"85","hubspot_record_id":"86","financial_support_does_your_district_school_prohibit_funds_to_be_used_for_equity_related_pd":"88","financial_support_equity_offerings":"89","financial_support_appropriate_mailing_address_for_book_delivery":"90","financial_support_please_share_anything_else":"91","financial_support_which_learning_experience":"92","financial_support_who_is_paying":"93","financial_assistance_what_amount":"94","content_area_of_interest":"95","date_subscribed":"97","contact_state_province":"98","have_you_been_part_of_a_previous_bright_morning_engagement":"99","contact_country":"101","external_source":"102","your_organization":"103","express_signin_link":"104","rhsubid":"105","rhisref":"106","rhsource":"107","rhcode":"108","rhglobref":"109","rhlastreward":"110","rhcoupon":"111","rhreflink":"112","rhtotref":"113","rhpartner":"114","current_active_course":"115","what_rewards_would_you_be_excited_to_get":"116","please_share_anything_
URL: https://brightmorningteam.activehosted.com/f/158?s... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of a form handling and submission functionality. It includes functions for displaying thank-you messages, unsubscribe messages, and error handling. While it uses some legacy APIs like `XDomainRequest`, the overall behavior seems to be focused on form-related functionality and does not exhibit any high-risk indicators like dynamic code execution or data exfiltration. The script appears to be part of a legitimate web application, and the risk score is low." }
window.cfields = {"7":"city","98":"contact_state_province","101":"contact_country","26":"role_type","13":"interest_which_of_our_collections_of_work","168":"complete_this_sentence_i_want_to_participate_in_professional_development","169":"select_the_statement_that_best_describes_your_access_to_pd_funding"}; window._show_thank_you = function(id, message, trackcmp_url, email) { var form = document.getElementById('_form_' + id + '_'), thank_you = form.querySelector('._form-thank-you'); form.querySelector('._form-content').style.display = 'none'; thank_you.innerHTML = message; thank_you.style.display = 'block'; const vgoAlias = typeof visitorGlobalObjectAlias === 'undefined' ? 'vgo' : visitorGlobalObjectAlias; var visitorObject = window[vgoAlias]; if (email && typeof visitorObject !== 'undefined') { visitorObject('setEmail', email); visitorObject('update'); } else if (typeof(trackcmp_url) != 'undefined' && trackcmp_url) { // Site tracking URL to use after inline form submission. _load_script(trackcmp_url); } if (typeof window._form_callback !== 'undefined') window._form_callback(id); }; window._show_unsubscribe = function(id, message, trackcmp_url, email) { var form = document.getElementById('_form_' + id + '_'), unsub = form.querySelector('._form-thank-you'); var branding = form.querySelector('._form-branding'); if (branding) { branding.style.display = 'none'; } form.querySelector('._form-content').style.display = 'none'; unsub.style.display = 'block'; form.insertAdjacentHTML('afterend', message) const vgoAlias = typeof visitorGlobalObjectAlias === 'undefined' ? 'vgo' : visitorGlobalObjectAlias; var visitorObject = window[vgoAlias]; if (email && typeof visitorObject !== 'undefined') { visitorObject('setEmail', email); visitorObject('update'); } else if (typeof(trackcmp_url) != 'undefined' && trackcmp_url) { // Site tracking URL to use after inline form submission. _load_script(trackcmp_url); } if (typeof window._form_callback !== 'undefined') window._form_callback(id); }; window._show_error = function(id, message, html) { var form = document.getElementById('_form_' + id + '_'), err = document.createElement('div'), button = form.querySelector('button'), old_error = form.querySelector('._form_error'); if (old_error) old_error.parentNode.removeChild(old_error); err.innerHTML = message; err.className = '_error-inner _form_error _no_arrow'; var wrapper = document.createElement('div'); wrapper.className = '_form-inner _show_be_error'; wrapper.appendChild(err); button.parentNode.insertBefore(wrapper, button); var submitButton = form.querySelector('[id^="_form"][id$="_submit"]'); submitButton.disabled = false; submitButton.classList.remove('processing'); if (html) { var div = document.createElement('div'); div.className = '_error-html'; div.innerHTML = html; err.appendChild(div); } }; window._show_pc_confirmation = function(id, header, detail, show, email) { var form = document.getElementById('_form_' + id + '_'), pc_confirmation = form.querySelector('._form-pc-confirmation'); if (pc_confirmation.style.display === 'none') { form.querySelector('._form-content').style.display = 'none'; pc_confirmation.innerHTML = "<div class='_form-title'>" + header + "</div>" + "<p>" + detail + "</p>" + "<button class='_submit' id='hideButton'>Manage preferences</button>"; pc_confirmation.style.display = 'block'; var mp = document.querySelector('input[name="mp"]'); mp.value = '0'; } else { form.querySelector('._form-content').style.display = 'inline'; pc_confirmation.style.display = 'none'; } var hideButton = document.getElementById('hideButton'); // Add event listener to the button hideButton.addEvent
URL: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20News Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Update Your Profile & Get Beyond ACE Emotions Skill Session for FREE", "prominent_button_name": "unknown", "text_input_field_labels": [ "Email", "City", "State/Province", "Country" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://brightmorningteam.activehosted.com/f/158?s... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script includes a deny list for certain domains, which suggests an attempt to prevent data transmission to those domains. It does not exhibit high-risk behaviors like dynamic code execution or data exfiltration. The script appears to be related to New Relic, a known analytics and monitoring service, which aligns with typical analytics functionality. However, it does involve external data transmission, which is a moderate-risk indicator." }
(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["api.candu.ai","collect-us.app-us1.com","sockjs.pusher.com","www.google-analytics.com","js-agent.newrelic.com"]},session_trace:{sampling_rate:0.0,mode:"FIXED_RATE",enabled:true,error_sampling_rate:0.0},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"456980009",accountID:"149034",trustKey:"149034",xpid:"VQIOUVVXGwcFUlhVDwgCUw==",licenseKey:"d3d5c809d5",applicationID:"456978955"};;/! For license information please see nr-loader-spa-1.278.2.min.js.LICENSE.txt / (()=>{var e,t,r={8122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e\|\|"object"!=typeof e)return(0,n.R)(3);if(!t\|\|"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),o=0===Object.keys(r).length?e:r;for(let a in o)if(void 0!==e[a])try{if(null===e[a]){r[a]=null;continue}Array.isArray(e[a])&&Array.isArray(t[a])?r[a]=Array.from(new Set([...e[a],...t[a]])):"object"==typeof e[a]&&"object"==typeof t[a]?r[a]=i(e[a],t[a]):r[a]=e[a]}catch(e){(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},2555:(e,t,r)=>{"use strict";r.d(t,{Vp:()=>c,fn:()=>s,x1:()=>u});var n=r(384),i=r(8122);const o={beacon:n.NT.beacon,errorBeacon:n.NT.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function u(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.a)(t,o);const r=(0,n.nY)(e);r&&(r.info=a[e])}},9417:(e,t,r)=>{"use strict";r.d(t,{D0:()=>p,gD:()=>m,xN:()=>g});var n=r(3333),i=r(993);const o=e=>{if(!e\|\|"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var a=r(2614),s=r(944),c=r(384),u=r(8122);const d="[data-nr-mask]",l=()=>{const e={feature_flags:[],experimental:{marks:!1,measures:!1,resources:!1},mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},get feature_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},harvest:{interval:30},jserrors:{enabled:!0,autoStart:!0},logging:{enabled:!0,autoStart:!0,level:i.p_.INFO},metrics:{enabled:!0,autoStart:!0},obfuscate:void 0,page_action:{enabled:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,autoStart:!0},performance:{get capture_marks(){return e.feature_flags.includes(n.$v.MARKS)\|\|e.experimental.marks},set capture_marks(t){e.experimental.marks=t},get capture_measures(){return e.feature_flags.includes(n.$v.MEASURES)\|\|e.experimental.measures},set capture_measures(t){e.experimental.measures=t},resources:{get enabled(){return e.feature_flags.includes(n.$v.RESOURCES)\|\|e.experimental.resources},set enabled(t){e.experimental.resources=t},asset_types:[],first_party_domains:[],ignore_newrelic:!0}},privacy:{cookies_enabled:!0},proxy:{assets:void 0,beacon:void 0},session:{expiresMs:a.wk,inactiveMs:a.BB},session_replay:{autoStart:!0,enabled:!1,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_sele
URL: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20News Model: Joe Sandbox AI	{ "brands": [ "Beyond ACE Emotions" ] }
	{ "brands": [ "Beyond ACE Emotions" ] }
URL: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20News Model: Joe Sandbox AI	```json{ "legit_domain": "activehosted.com", "classification": "unknown", "reasons": [ "The brand 'Beyond ACE Emotions' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The domain 'activehosted.com' is associated with ActiveCampaign, a legitimate email marketing service provider.", "The subdomain 'brightmorningteam' could be a customer of ActiveCampaign, which is a common practice for service providers.", "There are no obvious misspellings or suspicious elements in the URL.", "The presence of input fields like Email, City, State/Province, and Country is typical for marketing or registration forms." ], "riskscore": 3}
URL: brightmorningteam.activehosted.com Brands: Beyond ACE Emotions Input Fields: Email, City, State/Province, Country

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33260), with no line terminators
Category:	dropped
Size (bytes):	33261
Entropy (8bit):	5.16409871620741
Encrypted:	false
SSDEEP:	384:+NRlCUNerPSlP9xOeHyZp0/qMF3+qeKtYY2Dee5i/dvfKNXyhZ952MGWi:6RlErCMe0OqMF3+NXsxfKVyhZnit
MD5:	234346615B452270C8EE1158258C83BB
SHA1:	6073CDEAED3A3C4005FA766BD9A8573B07DE2459
SHA-256:	26DB36707844FA367F47C47B4B614DB27A608286FE71D9FF8C3012DBE71C5499
SHA-512:	CB3E05551BDED28C17910DC917C180ED4B413971E91E49FAEF9D1857912735BCD6124FEA289A9FB95E5EC0C84D9B92DF8F3FB41EA143BB782ECF6B05ACDE199D
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function __webpack_require__(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,__webpack_require__),n.l=!0,n.exports}__webpack_require__.m=e,__webpack_require__.c=t,__webpack_require__.d=function(e,t,r){__webpack_require__.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(e,t){if(1&t&&(e=__webpack_require__(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(__webpack_require__.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)__webpack_require__.d(r,n,function(t){return e[t]}.bind(null,n));return r},__webpack_require__.n=function(e){var t=e&&e.__esModule?function getDefault(){return e.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58863)
Category:	downloaded
Size (bytes):	146067
Entropy (8bit):	5.190251812942795
Encrypted:	false
SSDEEP:	1536:j861N08ERLy9YBfkTnTl0f7xv5eFt6odTCvMCI5YaWPFCxWU9WqHW4WnJWb9fW8B:1f08Ek4mTlo7xDvMn5RrR
MD5:	E65047845635CED73943597998E6F1E2
SHA1:	1A8C72BE57304D9199853D7E0A34830DC1B25369
SHA-256:	C62DFD8F01A1C2B640D05ECADE87AC8158F37C416DEB61E590669F3F77A95C4A
SHA-512:	33F90067FCC5304C0CAB3EDB0ECA5F7DF6D1EE9C94BEB6ACC392A0A0F8A6B2D3E3F6727DB95D324B5EA3CF1A402485EDC4F9CB1E3E676D9BCCBC6B33868C100A
Malicious:	false
Reputation:	low
URL:	https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <link rel="icon" href="https://d3rxaij56vjege.cloudfront.net/media/favicon.ico" />. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["api.candu.ai","collect-us.app-us1.com","sockjs.pusher.com","www.google-analytics.com","js-agent.newrelic.com"]},session_trace:{sampling_rate:0.0,mode:"FIXED_RATE",enabled:true,error_sampling_rate:0.0},distributed_tracing:{enabled:true}};(window.NREUM\|\|(NREUM={})).loader_config={agentID:"456980009",accountID:"149034",trustKey:"149034",xpid:"VQIOUVVXGwcFUlhVDwgCUw==",licenseKey:"d3d5c809d5",applicationID:"456978955"};;/! For license information please see nr-loader-spa-1.278.2.min.js.LICENSE.txt /.(()=>{var e,t,r={8122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	113889
Entropy (8bit):	5.254021734457043
Encrypted:	false
SSDEEP:	1536:CASDBvFn3nEjwiUCp4E5LQVeD0NLpe4vO94jhoTeNFHQ5dE7:CASH0jEEho1fjyi/cA
MD5:	1C1F4D86AF33DFBDE894FED8BE69496E
SHA1:	F70558267E35B333E926FA72B725F5E8785981EC
SHA-256:	853A2ECAC03D6311DC032989D9D3CA69ED9B77789C6885C8F634EBA9111C33F9
SHA-512:	2F226E3BD97A9C6BD2C48743007E70E0BDD1F819F8AFE518ADCA5E76D2E721CA5771932F244ED271853D464CDF03E24BCBD1ECB3761B35D2AE36CA3860E0DC15
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.278.2.min.js
Preview:	/! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t,i)=>{function r(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>r})},5519:(e,t,i)=>{i.d(t,{AQ:()=>u,me:()=>o,sH:()=>c,uJ:()=>h});var r=i(3304),s=i(3371),n=Object.prototype.hasOwnProperty,a=64;function o(e,t,i){return e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function c(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function h(e){let t=0;const i=Object.prototype.hasOwnProperty.call(Object,"create")?Object.create(null):{},r=(0,s.f)(e).obfuscator;return function(e){if(void 0===e\|\|""===e)return"";return e=r.obfuscateString(String(e)),n.call(i,e)?c(i[e],!0):(i[e]=t++,function(e){return"'"+e.replace(d,"\\$1")}(e))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((([e,s])=>{if(!(i.length>=a)){var

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18260, version 1.0
Category:	downloaded
Size (bytes):	18260
Entropy (8bit):	7.987522018633832
Encrypted:	false
SSDEEP:	384:W0xrkcVzToWCqcO5DP8+7kB0FLPLhA5fLLEiZGuUcT2O1QfMrqv+8ZJbH9gW:lxocZTozkF8wLDh4L4FuT5+Kqjrb9gW
MD5:	36F81686BBF993FBFE3AED9AE2F55E5B
SHA1:	5D18E2D5E48E0F5BA172E7477EED432541087402
SHA-256:	114F872ABF6CAE70383B09CA2168821991FDE718702D79CDC457A49B03560CB0
SHA-512:	8E017D00E626FBFE02E66D06AE1C4D1EAD0D227C4168CEDF116BDC0C6C7C0DE9D53B3C13ABD59BAAB43597002899E989235B5E8AAEE8DF6B199BE7588E6EF075
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/open-sans/files/open-sans-latin-700-normal.woff2
Preview:	wOF2......GT..........F..........................\|..B..h.`?STATZ..0..\|........L..u..2..6.$..`. ..`........z.....q..i.@..(...E.q. .....?#.!Cp..Z.....I.8s.............PSy...AVfP.#A..g..L.ww.\..SC.>..Q}.:...y?Qo.F/-...K..HQO.p~..M.'g.....z.Hq{X.&........&.S...........D......9.....}....?.I2.%b....e..T(d.U../..o.....I3..A..I.I.....MQ..3@..h.X...R%."H.....&.Y.u....+.../.}~............Z..xm\.H4 !......>.dP.....B..JR..5../...._.'....X.....].......T...] ...#...4..0....J.....2\|..5sU..`..a.R.A.....!~g..74.>~.k.?8.-N4.v..r]..........M....I\|Q...p..........q....D....s...]..U...INAb..._.c....O.).).!..2.G.f...vo..j..A..........mP.\....x.xF.{S../.+...J..#....b,.........w.X.(.. N$x.$..$.D..3A8,u1T.1...e...+....\:..+7...\|..'......,&...z.7.\D$m.-.. ..b!.#.~..@.vn.f.s<$..=...ei..a..R..~..-...2..r.{.k.m.C.Up..2r..;\C...Q.Al..s^..w..._....W.v.l&.QG....1>:..lGt........._O........H\|.Jw.\...o...u.*..^._.....7m1......W..._78?...`.".@..VnL?68.Lh.-Jq..&.p\|....

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10180, version 1.0
Category:	downloaded
Size (bytes):	10180
Entropy (8bit):	7.978606996128046
Encrypted:	false
SSDEEP:	192:TjKCG1yMl5z0LihNuJ/FDGVhh+wixFbjXRvtZ0j99NpI3JWKUOVKB:nKhyMvzOibuVih+7tXBC99NHIKB
MD5:	31C3253C6146D2A15CEDFCFBC975EF7D
SHA1:	11F185BE446D870DDBAA7BFFF3382E428DDDF853
SHA-256:	37C813E5C95A107D3992C300F1B03A488E70570166EB45687FEDAB8D1F3B6C7B
SHA-512:	3F706CA90A78C6970234F1A8EE67C650B8AB264006B77477CAF6B581AF13F0D9B4E64532E47CE9E557518E0D6259DE691CEB6B1B948D560A16E5CB9FEB2B7E16
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff2
Preview:	wOF2......'.......Il..'^..............................j.`?STAT^.....\|.......`.D..j..6.$..>. ..x.......A........(....i....\| e.L...E.M.w.<3..my.[S.0..]wJ...JL.i...........J.co.a1....BX}..L..k..}..>.../...;k7.a9u......1..IL....7o._..'j..H.E_,..G:...X>..f....6..0..#...AiA.L.B..F..0.#'....U..........{g.._...9.....Z.f.^.....5. ..a...\.,y2.&.m..5....<.O^.......r..LW...%.x_....J~ ..... .U...(U.i.Y..'.VK.j...'..9....(. .L....n@._k.....V2...7e...I.t..).....\...[.MH.......m..,..f..\..K..K.T`N..^g.....P....(............@.....E...s..hB.]a..8.3.8..5A,./.r ..>..yt....+..NA..R.....u..;.....=,X....\.f-.._..........lO...U.;.n..D. X.......E..a@D+...`a.A..@....... s\|[.3.@.....c..v.c....}.....Ra.Y.....?x.'..<.MI.BO......>%..x.....F.}.f.H..&$.H....M..cp<.Rd..eFY1e{..A.H>.D,.:.....'%...Oy....?@6....$......"..K5.........!..u.F.t.YD.].c.~Y..8..3n..S.J?.....Rz.0.M^..@........^...`"t.)@.>.i.W..g)!..d.;.=At.J5P6..Rx.........]7.?..i....=k.....%\^.X?(G.....88...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10048, version 1.0
Category:	downloaded
Size (bytes):	10048
Entropy (8bit):	7.975304430122288
Encrypted:	false
SSDEEP:	192:L2NWIvqD3XV0l3PzJumySdoLocigfVmuz4j4jJkPp8SloPB8f78X:L2NTE3XS37JXySMocPdpY4lOp8SloPac
MD5:	551A2AFE6444FC8E444E391A19F251FD
SHA1:	FDAC325526DC3F47C45DED1BF01660D0DF590DBB
SHA-256:	A46B80CEE6E7D76F70F227ECD79788F6AF78440FD3DF414D97972D215DF60580
SHA-512:	9A8DF30A54B4657D8E0A2D89E631E0A65AFDD082DBA4EACF5914AA8D549B0BE5D4C55EDA361A50B8A6B4F94DEF1BF0D223A79D42584D58EFC8A702948719CD93
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/open-sans/files/open-sans-symbols-700-normal.woff2
Preview:	wOF2......'@......I...&...............................j.`?STATZ.....\|.........&..j..6.$..>. ..`........@.....P.....\....o.....P[?..t..n.......o,\......b4B..R_=...y.Gb.!..............2)..0...f......\|."..U.....c.8Bc.....+..}....pI..e...Y.1.... .K...M....Ni.....X1L.(@QD..0Qh)1@$.m0@.Bg.....5.....v.s.....y.M@..(.0h.]WWk6.:...)Z...."..n.......}.............P...[z...P.\|.%.CRUU=u..\.L..]...s.Ny.>Y..s.;.L...B:m..M.C.N.../.x...m.\..f..M...a................>@I.b.y.:...+.."Tt...q.<:./....lV.U...e....w. "...........W....v..F#2.A...h.Jt........3s..8..@i.0...i..c........i..l].._-.<O....f..E..H. ....... 6..H.....>v.....^..0.....j...X7......Ep..BZx..4Wq....D..3..O....+J...K.H.....D@.ce...?7%....^.=J...B.@...N..Y..V.....L..."...^sL.c..6..3...^9...x>.9....Q).J........u.$..............%d..R.]9h..%ZC>..O...k.g.6\|v...JY..#.,?.......0.....`.ks....d......2.K.q..olV.@....+t@..m.r.....B..P...z.5. J.L..y.5 ...U.J....H..8_.2...D..t)......x.`..s?R...Y.^..z...tI.- .._.....)..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1497), with no line terminators
Category:	dropped
Size (bytes):	1497
Entropy (8bit):	5.749305941345614
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlc6+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:VKEciaKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	9405218B09BC7C791DB05058F0C6D8EC
SHA1:	E55A501753956254073C92F01BDC915E3414979B
SHA-256:	B7500420DD4720CFFEAAB477C64E5C8A7A624C2E4A9BB907D0650C5E26ADC35D
SHA-512:	4C7B97F96FB9B5B41804F1A237678ECF0F2C66845AAD3C6D9B7EDC94878E5A728A64CE38FF83EE7DF7FDAA1C62FEC8C68CB9BBFD9A427AC5F60A7CB90F007FE9
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptcha_callback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	113889
Entropy (8bit):	5.254021734457043
Encrypted:	false
SSDEEP:	1536:CASDBvFn3nEjwiUCp4E5LQVeD0NLpe4vO94jhoTeNFHQ5dE7:CASH0jEEho1fjyi/cA
MD5:	1C1F4D86AF33DFBDE894FED8BE69496E
SHA1:	F70558267E35B333E926FA72B725F5E8785981EC
SHA-256:	853A2ECAC03D6311DC032989D9D3CA69ED9B77789C6885C8F634EBA9111C33F9
SHA-512:	2F226E3BD97A9C6BD2C48743007E70E0BDD1F819F8AFE518ADCA5E76D2E721CA5771932F244ED271853D464CDF03E24BCBD1ECB3761B35D2AE36CA3860E0DC15
Malicious:	false
Reputation:	low
Preview:	/! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t,i)=>{function r(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>r})},5519:(e,t,i)=>{i.d(t,{AQ:()=>u,me:()=>o,sH:()=>c,uJ:()=>h});var r=i(3304),s=i(3371),n=Object.prototype.hasOwnProperty,a=64;function o(e,t,i){return e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function c(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function h(e){let t=0;const i=Object.prototype.hasOwnProperty.call(Object,"create")?Object.create(null):{},r=(0,s.f)(e).obfuscator;return function(e){if(void 0===e\|\|""===e)return"";return e=r.obfuscateString(String(e)),n.call(i,e)?c(i[e],!0):(i[e]=t++,function(e){return"'"+e.replace(d,"\\$1")}(e))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((([e,s])=>{if(!(i.length>=a)){var

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33260), with no line terminators
Category:	downloaded
Size (bytes):	33261
Entropy (8bit):	5.16409871620741
Encrypted:	false
SSDEEP:	384:+NRlCUNerPSlP9xOeHyZp0/qMF3+qeKtYY2Dee5i/dvfKNXyhZ952MGWi:6RlErCMe0OqMF3+NXsxfKVyhZnit
MD5:	234346615B452270C8EE1158258C83BB
SHA1:	6073CDEAED3A3C4005FA766BD9A8573B07DE2459
SHA-256:	26DB36707844FA367F47C47B4B614DB27A608286FE71D9FF8C3012DBE71C5499
SHA-512:	CB3E05551BDED28C17910DC917C180ED4B413971E91E49FAEF9D1857912735BCD6124FEA289A9FB95E5EC0C84D9B92DF8F3FB41EA143BB782ECF6B05ACDE199D
Malicious:	false
Reputation:	low
URL:	https://diffuser-cdn.app-us1.com/diffuser/diffuser.js
Preview:	!function(e){var t={};function __webpack_require__(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,__webpack_require__),n.l=!0,n.exports}__webpack_require__.m=e,__webpack_require__.c=t,__webpack_require__.d=function(e,t,r){__webpack_require__.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(e,t){if(1&t&&(e=__webpack_require__(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(__webpack_require__.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)__webpack_require__.d(r,n,function(t){return e[t]}.bind(null,n));return r},__webpack_require__.n=function(e){var t=e&&e.__esModule?function getDefault(){return e.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 1260, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1090816
Entropy (8bit):	7.995193423786561
Encrypted:	true
SSDEEP:	24576:zj7m1LJYWRAswJyP2xLfxv28Ga9jG0q5ZOEN98nqFJuS:X7m1LmWRCJyPgfM89xlEN98cUS
MD5:	932C3469A2F37B6187590C82878A3D09
SHA1:	787A4121F66D7D902381E3B6A2C2A83BDA8DBDA9
SHA-256:	29E31DEAC927D9D5F098F45FE28E6D57D7D86BEBAD2E9CF5DBDE638F8705ABBA
SHA-512:	09F6FAA8F3DD5CD245C3F2FB6C3FD572101368CDBC8C36E0E2A9C1A62C58CFE80BAD5E9A7C60A247D3211C177F71AA52A12D9CB7C203C38C36C819CA500C5F1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p.........m.pr....IDATx...[n.k.E.?K..X...p.!4d...2.`)....J..U.aO ..............#...w.e]..s...u.s.-.z.[...=...{nY....s.9.s.9.s.9.{.N........y...S.v..)^.....].\|..q>.k.8..k.O..5...no. """"""""""".S\|....m..............O.bk.r]..u..=...{nY.;...w.e]..s...u.s.-.z.[...V...DDDDDDDDDDD.....~..9?..q>.k.8..k.O..5.x...S.v..)^.....]....u...mW.p]..=...{nY.;...w.e]..s...u.s.-.z.[._...\...~..[...=...{nY.;...w.e]..s...u.s.-./...*..\.~..[...=...{nY.;...w.e]..s...u.s.-./..v.m.+/.oE..s...u.s.-.z.[...=...{nY.;...w.e....\.U..z!...5.x...S.v..)^.....].\|..q>.k.8..k.......y..G..5.x...S.v..)^.....].\|..q>.k.8..k..~{..............Oq.}.~..w..k.O..5.x...S.v..)^.....].\|..q>.k..k.....9s..o..o..u.s.-.z.[...=...{nY.;...w.e]..s..K}.}.=c....y...S.v..)^.....].\|..q>.k.8..k.O..5....."""""""""""">.u..j...w]?T.-.z.[...=...{nY.;...w.e]..s....G.i_...O....u.....w.e]..s...u.s.-.z.[...=...{nY.....{....v..)^.....].\|..q>.k.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	downloaded
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1445)
Category:	downloaded
Size (bytes):	12316
Entropy (8bit):	5.309375240032576
Encrypted:	false
SSDEEP:	192:HWUwFUwhE32WUYUAWUmUcWEWUjUZWUbUMfO4BQAWUNUGWUWUEWUEUGpRWUBFUB+H:2/InxfzBQKBeA+19DfzBQZabo
MD5:	91EC96FECB2B201077DE23469AD1D3AE
SHA1:	30A811C210B78CE46C49FB86D8819537797DA958
SHA-256:	8F7DA4B700661BE6CCAD00CCD884FFFE2068775331A92E67FF8A922DB2E7D956
SHA-512:	B01332286DF88A8FDB9D666DA333327AE8DAACB5B645643A4D321A46B96A3C80EE71D0ABA8ECC4BE3A2B02C9FFE3F61BD708A3406C590BBE91263ACFD5F8ABD2
Malicious:	false
Reputation:	low
URL:	"https://fonts.bunny.net/css?family=open-sans:400,700"
Preview:	/* math /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2) format('woff2'), url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff) format('woff'); . unicode-range: U+0302-0303,U+0305,U+0307-0308,U+0330,U+0391-03A1,U+03A3-03A9,U+03B1-03C9,U+03D1,U+03D5-03D6,U+03F0-03F1,U+03F4-03F5,U+2034-2037,U+2057,U+20D0-20DC,U+20E1,U+20E5-20EF,U+2102,U+210A-210E,U+2110-2112,U+2115,U+2119-211D,U+2124,U+2128,U+212C-212D,U+212F-2131,U+2133-2138,U+213C-2140,U+2145-2149,U+2190,U+2192,U+2194-21AE,U+21B0-21E5,U+21F1-21F2,U+21F4-2211,U+2213-2214,U+2216-22FF,U+2308-230B,U+2310,U+2319,U+231C-2321,U+2336-237A,U+237C,U+2395,U+239B-23B6,U+23D0,U+23DC-23E1,U+2474-2475,U+25AF,U+25B3,U+25B7,U+25BD,U+25C1,U+25CA,U+25CC,U+25FB,U+266D-266F,U+27C0-27FF,U+2900-2AFF,U+2B0E-2B11,U+2B30-2B4C,U+2BFE,U+FF5B,U+FF5D,U+1D400-1D7FF,U+1EE00-1EEFF;.}../ greek */.@font-fa

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	730
Entropy (8bit):	7.550528522404558
Encrypted:	false
SSDEEP:	12:6v/7kt/Bz9g8DxyZwmsfbK6iVi4+BMs0xHlB/zx5Rt27C/dtsvsdR8NJJtZ8gKeN:T9DxSw9K/ymx33D2edtZdRGJDJN
MD5:	2ED86F7B79C7AFA8FC13DA5D9180C70A
SHA1:	E234C01F9B5F8510E2DF6D7247E655E35E8E58F9
SHA-256:	424BC306A7592F083083582B9240E0EBCAD2338861B8D6D218A4E51F1349B733
SHA-512:	9FE43E2CD6E5AA5CFE7B789F70A787359A3807BA4A4C372C95B19C7748BF955334850FD97ED9CDC87DA67AA087BCDEB05B545D16BDB46B89070D0821EEE8AE8B
Malicious:	false
Reputation:	low
URL:	https://d3rxaij56vjege.cloudfront.net/media/favicon.ico
Preview:	.PNG........IHDR...0...0.....W.......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx..=L.A...%.J."IC..N.4.....6.O.4..5n.....C.....?..@..@.LCc.....!Q.>-.....}..B.O:.i...7.sg.?no.y.'..`.'.6N.m........n..D.....~`..x..."j../`{.......s.<s....VI.Iu..>..........$.iF.uH...cg.@n../...9.H.T".f.1..p70.1..";.E..[..n...........Y.d).,........B_5.-_..E..}s...AlD-...+.o.....y...`.d....V.....I..m}Q.H.[....m..U^6..o..8.......h..-=.^.)..Qy..%..Au(.P.";....z.y:...f....R...........#.4Ke.3..G'.'..E.6o.h.=.....Rt....6?...3.......i}f.{.B..6.3.@B.-E{::.\`.7J".Z...BeU.Q/......u.T<y.0.L.F.~9..\|..^3...F....F.....;.8.......\|?./..b..uv........+....t.e..Z...2.#U.kE4.$.c...8..^.,....)-........`.'.6w3..dQ.5.....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	730
Entropy (8bit):	7.550528522404558
Encrypted:	false
SSDEEP:	12:6v/7kt/Bz9g8DxyZwmsfbK6iVi4+BMs0xHlB/zx5Rt27C/dtsvsdR8NJJtZ8gKeN:T9DxSw9K/ymx33D2edtZdRGJDJN
MD5:	2ED86F7B79C7AFA8FC13DA5D9180C70A
SHA1:	E234C01F9B5F8510E2DF6D7247E655E35E8E58F9
SHA-256:	424BC306A7592F083083582B9240E0EBCAD2338861B8D6D218A4E51F1349B733
SHA-512:	9FE43E2CD6E5AA5CFE7B789F70A787359A3807BA4A4C372C95B19C7748BF955334850FD97ED9CDC87DA67AA087BCDEB05B545D16BDB46B89070D0821EEE8AE8B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx..=L.A...%.J."IC..N.4.....6.O.4..5n.....C.....?..@..@.LCc.....!Q.>-.....}..B.O:.i...7.sg.?no.y.'..`.'.6N.m........n..D.....~`..x..."j../`{.......s.<s....VI.Iu..>..........$.iF.uH...cg.@n../...9.H.T".f.1..p70.1..";.E..[..n...........Y.d).,........B_5.-_..E..}s...AlD-...+.o.....y...`.d....V.....I..m}Q.H.[....m..U^6..o..8.......h..-=.^.)..Qy..%..Au(.P.";....z.y:...f....R...........#.4Ke.3..G'.'..E.6o.h.=.....Rt....6?...3.......i}f.{.B..6.3.@B.-E{::.\`.7J".Z...BeU.Q/......u.T<y.0.L.F.~9..\|..^3...F....F.....;.8.......\|?./..b..uv........+....t.e..Z...2.#U.kE4.$.c...8..^.,....)-........`.'.6w3..dQ.5.....IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	dropped
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.673359313547511
Encrypted:	false
SSDEEP:	3:7SinPyVnwnWVKiG9oCkuoi4T7h:VPwaWV5GOCkJi43h
MD5:	AF1C18A046BC9EA2DA4F5D5F21AB0010
SHA1:	0043EEFEDEB90BBC788815FF3909E88EC6EE1393
SHA-256:	27925C8E95AFE4AF4B528FA0B17F3C923997D9EC91DF9E893F62BEF35FC1B314
SHA-512:	741B614C8D77080F1DC4B363DC0AA26362F1368BE7788D0B1065842594B1E89AD77BDD4A248183A77200A6AFBC537A343F881C6CBADDEE0F945571478B6D35E6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgm_BNeyfklTGhIFDXhvEhkSBQ1NpBj3EgUNeFAPfxIFDawtd7kSBQ1M6ABzEgUNdQ3Z1RIFDeGgR9M=?alt=proto
Preview:	Cj8KBw14bxIZGgAKBw1NpBj3GgAKBw14UA9/GgAKBw2sLXe5GgAKBw1M6ABzGgAKBw11DdnVGgAKBw3hoEfTGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	4.9480511394998015
Encrypted:	false
SSDEEP:	3:M+9ei3XasMcd7G1YharHykT3C0s3CgqK/MrVuKkmCGrRSMrhVSk:M+3npMc4OUhT3C09gqrrdrJrz
MD5:	1B959FD99F4E7A3A3BE5FB12B211A5AF
SHA1:	31DD012C37B154844D5BB4691E63BD4E671E6402
SHA-256:	E03B283CE9C486BCD6CE35B5E1AE0DE9A97524208A2D8AA3A83CD351D276802C
SHA-512:	4657B2EACF90F37416A520D3B2B69BE5C711977198259F4CCE803954D713F26E638FB09745F224262201C17F282480EABB92DE94780CDCA816FE3F71FB3D961D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQneYCbKljuT8RIFDXhvEhkSBQ1NpBj3EgUNeFAPfxIFDawtd7kSBQ1M6ABzEgUNdQ3Z1RIFDeGgR9MSBQ1TWkfF?alt=proto
Preview:	ClgKCw14bxIZGgQICRgBCgsNTaQY9xoECCEYAQoLDXhQD38aBAgiGAEKCw2sLXe5GgQIJBgBCgcNTOgAcxoACgcNdQ3Z1RoACgcN4aBH0xoACgcNU1pHxRoA

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1497), with no line terminators
Category:	downloaded
Size (bytes):	1497
Entropy (8bit):	5.749305941345614
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlc6+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:VKEciaKo7LmvtUjPKtX7ftD1INOLrwUG
MD5:	9405218B09BC7C791DB05058F0C6D8EC
SHA1:	E55A501753956254073C92F01BDC915E3414979B
SHA-256:	B7500420DD4720CFFEAAB477C64E5C8A7A624C2E4A9BB907D0650C5E26ADC35D
SHA-512:	4C7B97F96FB9B5B41804F1A237678ECF0F2C66845AAD3C6D9B7EDC94878E5A728A64CE38FF83EE7DF7FDAA1C62FEC8C68CB9BBFD9A427AC5F60A7CB90F007FE9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=recaptcha_callback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptcha_callback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 1260, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1090816
Entropy (8bit):	7.995193423786561
Encrypted:	true
SSDEEP:	24576:zj7m1LJYWRAswJyP2xLfxv28Ga9jG0q5ZOEN98nqFJuS:X7m1LmWRCJyPgfM89xlEN98cUS
MD5:	932C3469A2F37B6187590C82878A3D09
SHA1:	787A4121F66D7D902381E3B6A2C2A83BDA8DBDA9
SHA-256:	29E31DEAC927D9D5F098F45FE28E6D57D7D86BEBAD2E9CF5DBDE638F8705ABBA
SHA-512:	09F6FAA8F3DD5CD245C3F2FB6C3FD572101368CDBC8C36E0E2A9C1A62C58CFE80BAD5E9A7C60A247D3211C177F71AA52A12D9CB7C203C38C36C819CA500C5F1A
Malicious:	false
Reputation:	low
URL:	https://content.app-us1.com/ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png
Preview:	.PNG........IHDR...p.........m.pr....IDATx...[n.k.E.?K..X...p.!4d...2.`)....J..U.aO ..............#...w.e]..s...u.s.-.z.[...=...{nY....s.9.s.9.s.9.{.N........y...S.v..)^.....].\|..q>.k.8..k.O..5...no. """"""""""".S\|....m..............O.bk.r]..u..=...{nY.;...w.e]..s...u.s.-.z.[...V...DDDDDDDDDDD.....~..9?..q>.k.8..k.O..5.x...S.v..)^.....]....u...mW.p]..=...{nY.;...w.e]..s...u.s.-.z.[._...\...~..[...=...{nY.;...w.e]..s...u.s.-./...*..\.~..[...=...{nY.;...w.e]..s...u.s.-./..v.m.+/.oE..s...u.s.-.z.[...=...{nY.;...w.e....\.U..z!...5.x...S.v..)^.....].\|..q>.k.8..k.......y..G..5.x...S.v..)^.....].\|..q>.k.8..k..~{..............Oq.}.~..w..k.O..5.x...S.v..)^.....].\|..q>.k..k.....9s..o..o..u.s.-.z.[...=...{nY.;...w.e]..s..K}.}.=c....y...S.v..)^.....].\|..q>.k.8..k.O..5....."""""""""""">.u..j...w]?T.-.z.[...=...{nY.;...w.e]..s....G.i_...O....u.....w.e]..s...u.s.-.z.[...=...{nY.....{....v..)^.....].\|..q>.k.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 17:46:21.242383957 CET	49675	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:28.214452028 CET	443	49730	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:28.214559078 CET	49730	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.246215105 CET	49730	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.246287107 CET	49730	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.246751070 CET	49739	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.246803999 CET	443	49739	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:32.247149944 CET	49739	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.247884035 CET	49739	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:32.247909069 CET	443	49739	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:32.251122952 CET	443	49730	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:32.251135111 CET	443	49730	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:32.870490074 CET	443	49739	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:32.870593071 CET	49739	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:46:34.751373053 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:34.751467943 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:34.751558065 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:34.751791000 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:34.751817942 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.425618887 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.426112890 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:35.426145077 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.427244902 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.427304983 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:35.432589054 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:35.432682037 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.475972891 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:35.475996017 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:35.522830963 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:36.108999014 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.109052896 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.109123945 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.109412909 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.109450102 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.109508038 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.109639883 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.109653950 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.110091925 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.110105991 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.779277086 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.779555082 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.779589891 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.780762911 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.780827045 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.780834913 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.780873060 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.781904936 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.781969070 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.782111883 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.782118082 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.813436031 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.813653946 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.813664913 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.817328930 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.817393064 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.817398071 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.817455053 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.817776918 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.817953110 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.834829092 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.865463972 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.865469933 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.886461973 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.886531115 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.886806011 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.886838913 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.886864901 CET	443	49747	54.82.80.250	192.168.2.4
Jan 15, 2025 17:46:36.886872053 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.886909962 CET	49747	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:36.902586937 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:36.902641058 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:36.902712107 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:36.902931929 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:36.902940035 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:36.911084890 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:46:37.368505955 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.368787050 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.368813038 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.370248079 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.370311975 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.371417999 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.371504068 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.371642113 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.371654987 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.414956093 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.773036003 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.773166895 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.773328066 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.775850058 CET	49750	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.775871038 CET	443	49750	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.777717113 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.777776957 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:37.778012991 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.778378963 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:37.778399944 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.234751940 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.235263109 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.235282898 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.235761881 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.236289024 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.236371994 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.236454010 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.279360056 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.704201937 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.704257965 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.704282045 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.704319954 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.704335928 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.704401016 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.706077099 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706150055 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706193924 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.706209898 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706537008 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706556082 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706579924 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.706598997 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.706634045 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.708931923 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.755078077 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.755105019 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791022062 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791088104 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.791096926 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791198969 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791284084 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791347980 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.791363001 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.791445017 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.791450977 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.792836905 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.792911053 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.792917013 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793045998 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793109894 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.793114901 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793204069 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793292046 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793335915 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.793343067 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793623924 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.793678045 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793838978 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.793926954 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.793931961 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794318914 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794382095 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.794387102 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794483900 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794560909 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.794568062 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794594049 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.794687986 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.794692993 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.836647034 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.836673975 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.843803883 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.843852043 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.843869925 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877533913 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877587080 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.877610922 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877728939 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877753973 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877783060 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.877789974 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877800941 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.877854109 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.877854109 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.877861977 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.878515005 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.878635883 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.878643990 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.878700972 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.879467010 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.879601955 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.879805088 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.879841089 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.879853964 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.879869938 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.879934072 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.880441904 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.880475998 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.880486012 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.880491972 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.880513906 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.881285906 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.881326914 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.881356001 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.881361961 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.881371975 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.881387949 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.881426096 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.881426096 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.881431103 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.882246017 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.882297993 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.882307053 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.882313013 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.882534981 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.883181095 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.883253098 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.883260012 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.883316040 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.941502094 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:38.941561937 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:38.941613913 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:38.942164898 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:38.942184925 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:38.943216085 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:38.943244934 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:38.943299055 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:38.943747997 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:38.943761110 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:38.964328051 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964487076 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964494944 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964517117 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964546919 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964554071 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964554071 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964562893 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964596987 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964601994 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964658022 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964663029 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.964724064 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.964999914 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.965117931 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966250896 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966296911 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966346979 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966346979 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966356993 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966506958 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966546059 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966566086 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966573954 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966661930 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966665030 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966687918 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966698885 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:38.966717958 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.966873884 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.972227097 CET	49751	443	192.168.2.4	104.17.205.31
Jan 15, 2025 17:46:38.972251892 CET	443	49751	104.17.205.31	192.168.2.4
Jan 15, 2025 17:46:39.424973965 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.425235033 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.425256968 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.426316023 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.426372051 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.427602053 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.427666903 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.427793026 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.427800894 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.475997925 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.534964085 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.535330057 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.535365105 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.536402941 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.536463022 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.538160086 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.538245916 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.538620949 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.538630009 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.566112041 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566206932 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566306114 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566310883 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.566328049 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566360950 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.566368103 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566490889 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.566526890 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.566538095 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.572237015 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.572295904 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.572323084 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.572331905 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.572374105 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.572380066 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.584940910 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.618235111 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.618247032 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653583050 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653621912 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653629065 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.653640032 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653686047 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653723001 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653727055 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.653734922 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.653758049 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.654000998 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.654036999 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.654042959 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.654542923 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.654587984 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.654611111 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.654616117 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.654900074 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.654905081 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.655175924 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.655214071 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.655216932 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.655229092 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.655263901 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.655397892 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656357050 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656429052 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656435966 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.656440973 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656475067 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.656480074 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656533003 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656570911 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656570911 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.656582117 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.656614065 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.657361031 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.666949987 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671262980 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671281099 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671309948 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671340942 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.671363115 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671400070 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.671415091 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.671425104 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.671468973 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.673047066 CET	49752	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.673065901 CET	443	49752	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.696023941 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:39.696067095 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:39.696203947 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:39.696826935 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:39.696846008 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:39.710192919 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.710203886 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741214991 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741266966 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741276979 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.741287947 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741326094 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.741331100 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741395950 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741405010 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741441965 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.741450071 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741631031 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741681099 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741684914 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.741689920 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.741729975 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.742461920 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.742470980 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.742515087 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.742531061 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.742582083 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.742587090 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.742599010 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.742624998 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.742645025 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.743499041 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.743551970 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.743555069 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.743562937 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.743590117 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.743599892 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.744314909 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.744370937 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.744375944 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.744385958 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.744416952 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.744436979 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.745146990 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.745198965 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.745239019 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.745285034 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.745326996 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.745382071 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.746068954 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.746124029 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.798693895 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.798749924 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.798810959 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.799024105 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.799040079 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.799498081 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.799540997 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.799623966 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.800026894 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.800070047 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.800120115 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.800332069 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.800349951 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.800507069 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.800522089 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.801038027 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.801045895 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.801121950 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.801290989 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:39.801304102 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:39.806550026 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.806564093 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.806637049 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.806894064 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.806910038 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828387022 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828491926 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.828587055 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828634024 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.828876019 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828917027 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828929901 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.828939915 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.828952074 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.828975916 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829427958 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829467058 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829478025 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829483986 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829504013 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829504967 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829526901 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829530001 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829550028 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829576015 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829616070 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.829621077 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.829715014 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830058098 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830104113 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830123901 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830127954 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830147982 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830159903 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830169916 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830174923 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830189943 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830199003 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830241919 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.830246925 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.830374956 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.831187010 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.831231117 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.831247091 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.831250906 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.831259012 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.831290960 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.831363916 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.831407070 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.831449986 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.831490040 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916111946 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916177034 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916183949 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916196108 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916219950 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916240931 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916264057 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916306973 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916374922 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916419983 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916477919 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916522980 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916610003 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916654110 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.916676998 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.916728020 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917099953 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917154074 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917164087 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917175055 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917207956 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917223930 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917273998 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917278051 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917344093 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917859077 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917867899 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917890072 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.917927027 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.917931080 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.918134928 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.918513060 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.918534994 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.918560982 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.918564081 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.918596983 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.919140100 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.919159889 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.919188023 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.919193029 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.919233084 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.921854019 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.921874046 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.921926975 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.921932936 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.922116041 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.922175884 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.922195911 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.922241926 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.922245026 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:39.922260046 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:39.922282934 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.004863977 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.004892111 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.004931927 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.004944086 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.004997015 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005043983 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005060911 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005080938 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005084038 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005103111 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005125999 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005171061 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005188942 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005213976 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005218029 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005259037 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005330086 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005348921 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005379915 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005383015 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005412102 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005422115 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005491018 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005508900 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005568981 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005573988 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005587101 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005615950 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005637884 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005640030 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005647898 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005673885 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005692959 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005744934 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005773067 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005795956 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005800009 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005829096 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005836964 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005892992 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005912066 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005944014 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005948067 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.005979061 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.005991936 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.091489077 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.091520071 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.091603041 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.091618061 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.091659069 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092001915 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092025995 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092062950 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092068911 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092093945 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092113972 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092477083 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092499018 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092538118 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092542887 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092575073 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092587948 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092869997 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092889071 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092938900 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092943907 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.092967033 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.092986107 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093290091 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093314886 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093339920 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093343973 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093367100 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093385935 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093624115 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093645096 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093678951 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093683004 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.093732119 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.093978882 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094002008 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094026089 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.094029903 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094049931 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.094069958 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.094304085 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094321966 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094347954 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.094352007 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.094377041 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.094398975 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.178606987 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178628922 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178704023 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.178718090 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178769112 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178792953 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.178796053 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178811073 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.178823948 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.178854942 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179027081 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179045916 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179080963 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179085970 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179111958 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179131031 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179266930 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179286003 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179318905 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179322958 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179347038 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179368973 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179521084 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179539919 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179600954 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179608107 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179625988 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179646969 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179701090 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179817915 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179838896 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179862022 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179866076 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.179894924 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.179912090 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.180082083 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180099964 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180139065 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.180143118 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180186987 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.180319071 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180340052 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180387974 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.180392981 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.180428028 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.264338970 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.264631033 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.264664888 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.265885115 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.265950918 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266115904 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266149998 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266176939 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266191959 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266216040 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266235113 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266824961 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266849041 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266880035 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266885996 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.266940117 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.266947985 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.267366886 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.267452002 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.267549992 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.267575979 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.267630100 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.267635107 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.267680883 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268095970 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268115044 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268160105 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268165112 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268208027 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268537045 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268589973 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268642902 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268646955 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268811941 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268826008 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268838882 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268847942 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268857956 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268893003 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268898010 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.268919945 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.268939018 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.269191027 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269221067 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269248009 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.269251108 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269277096 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.269303083 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.269550085 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269572020 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269598961 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.269603014 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.269634008 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.313467979 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.348419905 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.348691940 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.348715067 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.349750042 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.349812031 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.350235939 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.350303888 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.350425959 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.353553057 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353588104 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353621006 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.353631973 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353681087 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.353696108 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.353776932 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353806973 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353849888 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.353857040 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.353918076 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354233980 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354264021 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354304075 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354310036 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354336023 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354352951 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354528904 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354549885 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354579926 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354584932 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354609966 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354624987 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354825974 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354846954 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354880095 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354883909 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.354921103 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.354942083 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355046034 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355066061 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355103016 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355108023 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355139971 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355155945 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355359077 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355381012 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355417967 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355422020 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355456114 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355470896 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355509043 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355540037 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355560064 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.355564117 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.355597019 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.379458904 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.379724979 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.379739046 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.383275032 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.383351088 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.383852959 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.384002924 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.384007931 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.384026051 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.388046026 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.388288975 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.388313055 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.388338089 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388395071 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388432026 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388447046 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.388458014 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388513088 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388540983 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.388549089 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.388607979 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.388895035 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.389138937 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.389173985 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.389216900 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.389225006 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.389282942 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.390198946 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.390204906 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.392102003 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.392185926 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.392525911 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.392663002 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.392667055 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.392694950 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.392991066 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.420804977 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.420825958 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.421334028 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.421361923 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.421653032 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.421663046 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.422421932 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.422478914 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.422699928 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.422760010 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.422971964 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.423039913 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.423461914 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.423526049 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.423711061 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.423719883 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.423839092 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.423846006 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.436177969 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.436187983 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.436300993 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.436300993 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.436301947 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.436330080 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.436347008 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.443984032 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444021940 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444062948 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444070101 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444101095 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444118023 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444276094 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444298983 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444344044 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444349051 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444380045 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444868088 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444890976 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444912910 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.444916964 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.444952011 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445333958 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445355892 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445394039 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445399046 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445415974 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445436001 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445813894 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445837975 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445863008 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445867062 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.445895910 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.445909023 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446260929 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446288109 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446319103 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446321964 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446346998 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446362019 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446593046 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446614981 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446641922 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446645021 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446679115 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446943998 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446964025 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.446990967 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.446994066 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.447017908 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.447035074 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.466787100 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.466787100 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.480094910 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480144024 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480156898 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.480181932 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480220079 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.480227947 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480402946 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480467081 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480488062 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.480499983 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480550051 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480588913 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.480597019 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.480685949 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.480881929 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481021881 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481057882 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481057882 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.481072903 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481141090 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.481151104 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481224060 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.481266975 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.481622934 CET	49759	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.481638908 CET	443	49759	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.482057095 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.482866049 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.496995926 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.497041941 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.497091055 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.497308969 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.497318983 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.500797033 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.500881910 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.500961065 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.501188040 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.501211882 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.525202036 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530237913 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.530301094 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.530332088 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.530339003 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.530384064 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.530416012 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.530574083 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.530709028 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530719995 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530757904 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530765057 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.530776978 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530790091 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530803919 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530814886 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.530814886 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.530819893 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.530832052 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.530863047 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.531514883 CET	49753	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:40.531527996 CET	443	49753	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:40.533334017 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536703110 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536714077 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536747932 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536761999 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536771059 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.536793947 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536809921 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.536812067 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.536833048 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.536865950 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.545705080 CET	49755	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.545727968 CET	443	49755	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.560195923 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:40.560234070 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:40.560326099 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:40.560527086 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:40.560539961 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:40.561799049 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.561832905 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.561863899 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.561882973 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.561891079 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.561907053 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.561923981 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.562912941 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.562922955 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.562972069 CET	443	49758	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.563007116 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.563043118 CET	49758	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.565702915 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565731049 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565766096 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565778971 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565784931 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.565803051 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565825939 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.565846920 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.565846920 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.565872908 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.611865044 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.611943007 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.611959934 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.612063885 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.612323046 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.612332106 CET	443	49757	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.612340927 CET	49757	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.637864113 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.637938023 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.638027906 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.638051987 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.638065100 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.638111115 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.638782978 CET	49754	443	192.168.2.4	216.58.206.68
Jan 15, 2025 17:46:40.638794899 CET	443	49754	216.58.206.68	192.168.2.4
Jan 15, 2025 17:46:40.650193930 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.650269985 CET	443	49756	169.150.236.105	192.168.2.4
Jan 15, 2025 17:46:40.650358915 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.650501966 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.650501966 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.650535107 CET	49756	443	192.168.2.4	169.150.236.105
Jan 15, 2025 17:46:40.651596069 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:40.651638985 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:40.651699066 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:40.653322935 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:40.653337002 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.108731985 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.114548922 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.122884989 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.154598951 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.162456989 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.165242910 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.165260077 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.165555954 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.165617943 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.165626049 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.165637970 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.166435957 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.166490078 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.167284966 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.167360067 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.169440031 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.169517994 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.175097942 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.175177097 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.207890034 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.208167076 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.208626032 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.208940029 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.208957911 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.208965063 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.209005117 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.209043026 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.209136009 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.209151030 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.258270979 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.258271933 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.258280993 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.281563044 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.281841993 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.281922102 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.282978058 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.283054113 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.283401966 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.283476114 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.283600092 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.322494030 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322536945 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322563887 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322597980 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322616100 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.322618961 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322632074 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.322655916 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.322673082 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.323333025 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.323824883 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.323841095 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.323870897 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.323880911 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.324047089 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.327250957 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.327296972 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.327375889 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.327433109 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.327440023 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.332973957 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333014965 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333100080 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.333112001 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333148956 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.333153963 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333225965 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333250046 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333259106 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.333266020 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333300114 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.333304882 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333745956 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.333786011 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.333790064 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.335156918 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.335196972 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.337789059 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.337857962 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.337862015 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.380646944 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.380665064 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.380672932 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.419491053 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.419651985 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.419732094 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.419853926 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.419918060 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.419946909 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.419975996 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.419981956 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.419996023 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420034885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.420037031 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420048952 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420085907 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.420100927 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420135975 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420140982 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.420149088 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420167923 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420186996 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.420195103 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.420315981 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.420500040 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.420500994 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.420542955 CET	443	49762	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.420773029 CET	49762	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.421010971 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421047926 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421067953 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421089888 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421107054 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421118975 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.421127081 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.421143055 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.421159029 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.421977997 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422024012 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422051907 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422060013 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422082901 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422082901 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422096014 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.422110081 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422130108 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.422137022 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422144890 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.422151089 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422157049 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422173977 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.422182083 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.422210932 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.422245979 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422297955 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422329903 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.422334909 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.422365904 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.422370911 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423118114 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423156977 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423182011 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423191071 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.423196077 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423228025 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.423247099 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423278093 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.423280954 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423346043 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.423423052 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.424062967 CET	49761	443	192.168.2.4	104.17.31.174
Jan 15, 2025 17:46:41.424078941 CET	443	49761	104.17.31.174	192.168.2.4
Jan 15, 2025 17:46:41.436270952 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.436363935 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.436446905 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.436686993 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.436724901 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.510349035 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.510500908 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.510581970 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.510598898 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.510613918 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.510675907 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.510684967 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511003971 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511055946 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511064053 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511090040 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511109114 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511128902 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511138916 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511595011 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511651993 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511658907 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511697054 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511749983 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511756897 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511796951 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.511796951 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511820078 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.511845112 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.512636900 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.512695074 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.512701988 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.512727976 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.512784004 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.512792110 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.512808084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.512856007 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.512862921 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.515983105 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.563494921 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.563636065 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.563704967 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.563750982 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.563965082 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.564023018 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.578727007 CET	49764	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:41.578763962 CET	443	49764	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:41.601538897 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.601607084 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.601706028 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.601759911 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.601807117 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.601867914 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.601912975 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.601967096 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602003098 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602054119 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602082968 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602133989 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602201939 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602268934 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602324963 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602375031 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602426052 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602477074 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602515936 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602561951 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.602608919 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.602658033 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.603646994 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.603739023 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.603796959 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.603848934 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.603893042 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.603943110 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.603960037 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.604017973 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.604378939 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.604434013 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.604484081 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.604537010 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.604578972 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.604626894 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.604660988 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.604715109 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.605099916 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.605155945 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.605190039 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.605242968 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.605273962 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.605323076 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.691725969 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.691807985 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.691857100 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.691935062 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.691962004 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692014933 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692059994 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692115068 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692156076 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692279100 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692293882 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692322969 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692353964 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692372084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692378998 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692405939 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692429066 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692507029 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692564964 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692573071 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692610025 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692619085 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692635059 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692662001 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692811966 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692866087 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692873955 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.692887068 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.692913055 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.693028927 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693069935 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693093061 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.693101883 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693126917 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.693722963 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693785906 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693800926 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.693815947 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.693849087 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.696999073 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697040081 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697107077 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.697115898 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697144032 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.697376013 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697427034 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697433949 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.697453022 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.697485924 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.746731997 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.781887054 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.781912088 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.781979084 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.781990051 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782031059 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782159090 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782176018 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782218933 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782226086 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782289028 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782427073 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782444000 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782491922 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782499075 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782526016 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782545090 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782576084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782598019 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782629013 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782634020 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782651901 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782675028 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782871008 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782886028 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782926083 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.782932997 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.782973051 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783198118 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783215046 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783248901 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783256054 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783294916 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783310890 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783482075 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783499956 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783536911 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783545017 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783576012 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783588886 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783672094 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783690929 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783725023 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783730984 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.783763885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.783777952 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.872525930 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.872546911 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.872602940 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.872621059 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.872662067 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873095989 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873123884 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873153925 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873162031 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873183012 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873200893 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873558044 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873573065 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873619080 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873625994 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873687983 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873730898 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873747110 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873776913 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873784065 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.873801947 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.873816967 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874054909 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874068975 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874133110 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874140024 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874239922 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874257088 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874289036 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874295950 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874308109 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874336958 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874551058 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874564886 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874610901 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874619007 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874659061 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874819040 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874836922 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874870062 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874876976 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.874902964 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.874917984 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.895869017 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.896095037 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.896156073 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.897207975 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.897300959 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.899687052 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.899770975 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.900053978 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.900070906 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.945729971 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.963392019 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.963418007 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.963459969 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.963483095 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.963500023 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.963571072 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.963864088 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.963881016 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.963939905 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.963948965 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964159966 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964292049 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964308023 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964354038 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964360952 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964391947 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964412928 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964672089 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964687109 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964725018 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964731932 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.964756012 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.964765072 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966181993 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966197968 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966242075 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966250896 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966312885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966312885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966609001 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966625929 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966681004 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966690063 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966825008 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.966942072 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966959000 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.966999054 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.967005014 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.967034101 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.967052937 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.967457056 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.967474937 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.967535019 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:41.967544079 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:41.967583895 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.053782940 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.053802013 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.053879023 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.053903103 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054059982 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.054326057 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054342031 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054395914 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.054404020 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054464102 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.054819107 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054858923 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054877996 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.054887056 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.054917097 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.054934025 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055104971 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055145025 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055167913 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055176973 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055202961 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055236101 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055471897 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055514097 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055531979 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055538893 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055561066 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055589914 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055799007 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055840969 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055860043 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055867910 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.055896044 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.055908918 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056098938 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056153059 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056173086 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056181908 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056215048 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056235075 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056314945 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056360960 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056376934 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056385994 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.056421041 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.056432009 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.128132105 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.128210068 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.129376888 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.130551100 CET	49766	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.130569935 CET	443	49766	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.144507885 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.144529104 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.144584894 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.144601107 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.144762039 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145040035 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145080090 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145104885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145112038 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145148993 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145164013 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145298958 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145339966 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145363092 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145370007 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145397902 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145414114 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145622969 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145662069 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145680904 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145689011 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.145714998 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.145735979 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146039009 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146094084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146116972 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146125078 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146140099 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146161079 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146306992 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146348953 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146368027 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146375895 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146401882 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146413088 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146564007 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146601915 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146622896 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146631002 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146648884 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146676064 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146801949 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146842003 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146867037 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146877050 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.146913052 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.146913052 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235251904 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235282898 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235416889 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235416889 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235443115 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235483885 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235681057 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235701084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235743046 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235749960 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.235778093 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.235795021 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236299038 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236320972 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236362934 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236371040 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236397028 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236411095 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236577034 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236598969 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236633062 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236640930 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236668110 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236679077 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236716986 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236746073 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236778975 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236787081 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236809969 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236826897 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236879110 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236895084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236933947 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236941099 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.236960888 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.236996889 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237024069 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237046003 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237075090 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237082958 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237109900 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237119913 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237189054 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237205029 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237234116 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237240076 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237268925 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237272024 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237284899 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237292051 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237303019 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237322092 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237346888 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237355947 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237390041 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.237400055 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.237442017 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.240082979 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.244568110 CET	49763	443	192.168.2.4	104.18.128.216
Jan 15, 2025 17:46:42.244584084 CET	443	49763	104.18.128.216	192.168.2.4
Jan 15, 2025 17:46:42.247091055 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.247140884 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.247215986 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.247438908 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.247459888 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.909806967 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.910181999 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.910255909 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.913849115 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.913933039 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.914299965 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.914484024 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.914603949 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:42.914621115 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:42.955279112 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.214823961 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.214973927 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.215023994 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.215058088 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.215133905 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.215179920 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.215188980 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.215276003 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.215334892 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.215342999 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.220556021 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.220609903 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.220618963 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.226803064 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.226880074 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.226888895 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.233449936 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.233500957 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.233510971 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.289954901 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.306554079 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.306757927 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.306833029 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.306869030 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.306899071 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.306945086 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.311203003 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.316345930 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.316411972 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.316440105 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.322721958 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.322773933 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.322781086 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.322796106 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.322841883 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.328928947 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.335194111 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.335293055 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.335299015 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.335331917 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.335374117 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.341012955 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.346901894 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.346946955 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.346955061 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.346968889 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.347011089 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.352758884 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.358750105 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.358788013 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.358843088 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.358860016 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.359348059 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.364645958 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.364717960 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.364758015 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.364765882 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.364916086 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:43.364953041 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.365232944 CET	49767	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:43.365253925 CET	443	49767	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:44.809614897 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.809658051 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:44.809710026 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.810295105 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.810307980 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:44.831522942 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.831562996 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:44.831614017 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.832144022 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:44.832159042 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.306052923 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:45.306118011 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:45.306168079 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:45.408632040 CET	49745	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:46:45.408673048 CET	443	49745	142.250.181.228	192.168.2.4
Jan 15, 2025 17:46:45.449851990 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.450047970 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.450083017 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.450423956 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.450748920 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.450819969 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.451281071 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.462466002 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.462670088 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.462685108 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.463036060 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.463639021 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.463700056 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.463745117 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.495333910 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.506934881 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.506948948 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778072119 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778100967 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778145075 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778166056 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778172016 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778198957 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778223991 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778240919 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778249979 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778264999 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778264999 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778305054 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778352022 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778378010 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778395891 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778431892 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778449059 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.778536081 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.778563976 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.781011105 CET	49774	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:45.781027079 CET	443	49774	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:45.789781094 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:45.789870977 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:45.789966106 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:45.790219069 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:45.790249109 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:45.824229002 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.006532907 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.006594896 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.006628990 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.006659031 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.006681919 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.006722927 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.006731033 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.006812096 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.007194042 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.007201910 CET	443	49775	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.007214069 CET	49775	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.056503057 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.056538105 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.056759119 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.056813002 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.056828022 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.107084990 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.107156992 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.107281923 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.107865095 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.107892990 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.114864111 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.114903927 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.114975929 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.115191936 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.115206003 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.129239082 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.129273891 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.129333973 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.129523993 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.129534006 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.577523947 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.580872059 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.580908060 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.582076073 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.582254887 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.583648920 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.583719969 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.583914995 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.631335974 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.636008024 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.640417099 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.640449047 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.641041040 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.641084909 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.641980886 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.644824982 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.644933939 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.644949913 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.691339970 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.693255901 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693269014 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693305969 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693320036 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693332911 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693337917 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.693367958 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693380117 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.693423033 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.693423986 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.693423986 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.694309950 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.695450068 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.696187973 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.696207047 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.696542978 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.697269917 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.697335958 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.697422981 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.741425037 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.743334055 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.756167889 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.756545067 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.756572008 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.757045984 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.757388115 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.757482052 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.757550001 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:46.775939941 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.775954008 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.775996923 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.776014090 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.776029110 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.776061058 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.776082039 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.776104927 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.777592897 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.777605057 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.777630091 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.777657032 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.777658939 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.777671099 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.777693987 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.777714014 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.803338051 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:46.862020016 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.862061977 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.862165928 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.862201929 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.862253904 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.863099098 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.863132000 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.863173008 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.863181114 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.863209963 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.863219976 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.864787102 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.864810944 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.864872932 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.864881992 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.864928961 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.865668058 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.865722895 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.865732908 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.865741968 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.865771055 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.865789890 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.865807056 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.865952969 CET	49781	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.865972996 CET	443	49781	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.881947994 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.882003069 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.882123947 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.882858038 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:46.882879972 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:46.887207985 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.887451887 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.887495041 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.888938904 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.889008045 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.889935017 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.890067101 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.890093088 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.890202045 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.914515972 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.914818048 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.914916992 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.916075945 CET	49777	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.916095018 CET	443	49777	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.944315910 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:46.944327116 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:46.969191074 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969233036 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969260931 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969286919 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969310999 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969350100 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.969371080 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.969428062 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.969448090 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.974917889 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.974961996 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.975212097 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.975225925 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.983026981 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.983099937 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.983109951 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.987543106 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.987607002 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:46.987613916 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:46.991206884 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:47.038106918 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:47.047107935 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.047182083 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.047233105 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.047280073 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.047332048 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:47.047333002 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:47.047338963 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.047368050 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.048037052 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:47.050506115 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.050674915 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.054008007 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:47.057153940 CET	49780	443	192.168.2.4	172.217.18.4
Jan 15, 2025 17:46:47.057198048 CET	443	49780	172.217.18.4	192.168.2.4
Jan 15, 2025 17:46:47.057559013 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:47.058439970 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:47.058518887 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:47.058545113 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:47.058566093 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:47.058621883 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:47.060087919 CET	49779	443	192.168.2.4	142.250.185.68
Jan 15, 2025 17:46:47.060102940 CET	443	49779	142.250.185.68	192.168.2.4
Jan 15, 2025 17:46:47.152266979 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:47.152369022 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:47.152959108 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:47.153215885 CET	49782	443	192.168.2.4	18.245.45.143
Jan 15, 2025 17:46:47.153255939 CET	443	49782	18.245.45.143	192.168.2.4
Jan 15, 2025 17:46:47.181442022 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.181548119 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.181637049 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.181866884 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.181896925 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.343663931 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.345707893 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.345742941 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.346827030 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.346911907 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.347291946 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.347368956 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.347438097 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.347448111 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.397140980 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.444746971 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.460455894 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.460472107 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.460494041 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.460561991 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.460597038 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.460613966 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.460656881 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.534678936 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.534732103 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.534816027 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.534847975 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.534995079 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.534996033 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.536338091 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.536382914 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.536431074 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.536439896 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.536458969 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.536483049 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.551453114 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:47.551484108 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:47.551544905 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:47.552388906 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:47.552402020 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:47.622720003 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.622754097 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.622855902 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.622889996 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.622936010 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.623840094 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.623868942 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.623907089 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.623914957 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.623940945 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.623959064 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.624866009 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.624895096 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.624933958 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.624941111 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.624972105 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.625011921 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.625758886 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.625843048 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.625850916 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.625866890 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.625917912 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.626146078 CET	49783	443	192.168.2.4	162.247.243.39
Jan 15, 2025 17:46:47.626161098 CET	443	49783	162.247.243.39	192.168.2.4
Jan 15, 2025 17:46:47.914084911 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.918245077 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.918299913 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.919389009 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.919480085 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.919811010 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.919878006 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.919971943 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:47.919981956 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:47.974951982 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:48.002717018 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.003032923 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.003063917 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.004626036 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.004693031 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.005111933 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.005202055 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.005281925 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.005294085 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.053045988 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.134213924 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.134351969 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.134402037 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.187762976 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:48.187849045 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:48.187906981 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:48.427649021 CET	49786	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.427709103 CET	443	49786	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.428359032 CET	49785	443	192.168.2.4	18.245.45.59
Jan 15, 2025 17:46:48.428442001 CET	443	49785	18.245.45.59	192.168.2.4
Jan 15, 2025 17:46:48.458666086 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.458703041 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.458774090 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.458976030 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.458987951 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.931763887 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.932023048 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.932090998 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.932589054 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.933060884 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.933187962 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:48.933196068 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.975923061 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:48.975944042 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:49.066726923 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:49.066836119 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:49.066922903 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:49.068078995 CET	49788	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:46:49.068119049 CET	443	49788	162.247.243.29	192.168.2.4
Jan 15, 2025 17:46:52.043240070 CET	443	49739	173.222.162.32	192.168.2.4
Jan 15, 2025 17:46:52.043401003 CET	49739	443	192.168.2.4	173.222.162.32
Jan 15, 2025 17:47:18.195875883 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.195904970 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.196002007 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.196438074 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.196448088 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.230380058 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.230412006 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.230556965 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.230761051 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.230772972 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.653407097 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.653893948 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.653904915 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.654397964 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.656038046 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.656119108 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.656449080 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.686378956 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.687402964 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.687413931 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.687750101 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.688818932 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.688818932 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.688874960 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.703324080 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.741287947 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.780873060 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.781008959 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.781080961 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.782416105 CET	49812	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.782438040 CET	443	49812	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.812398911 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.812678099 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:18.812849045 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.813575983 CET	49814	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:18.813591003 CET	443	49814	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:21.865885973 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:47:21.865895987 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:47:26.319912910 CET	49723	80	192.168.2.4	199.232.210.172
Jan 15, 2025 17:47:26.320005894 CET	49724	80	192.168.2.4	199.232.210.172
Jan 15, 2025 17:47:26.325522900 CET	80	49723	199.232.210.172	192.168.2.4
Jan 15, 2025 17:47:26.325557947 CET	80	49724	199.232.210.172	192.168.2.4
Jan 15, 2025 17:47:26.325611115 CET	49723	80	192.168.2.4	199.232.210.172
Jan 15, 2025 17:47:26.325654030 CET	49724	80	192.168.2.4	199.232.210.172
Jan 15, 2025 17:47:34.805408001 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:34.805450916 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:34.805510998 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:34.805779934 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:34.805795908 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:35.457587957 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:35.458003044 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:35.458024979 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:35.458355904 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:35.458915949 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:35.458981037 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:35.507230043 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:37.540672064 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:47:37.540802956 CET	443	49748	54.82.80.250	192.168.2.4
Jan 15, 2025 17:47:37.540930986 CET	49748	443	192.168.2.4	54.82.80.250
Jan 15, 2025 17:47:45.359724045 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:45.359894037 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:45.360001087 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:45.539516926 CET	49923	443	192.168.2.4	142.250.181.228
Jan 15, 2025 17:47:45.539550066 CET	443	49923	142.250.181.228	192.168.2.4
Jan 15, 2025 17:47:48.322767019 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.322788954 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.322957993 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.323157072 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.323173046 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.775810003 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.776082993 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.776093960 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.776565075 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.777139902 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.777220011 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.777400017 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.819331884 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.901125908 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.901248932 CET	443	50006	162.247.243.29	192.168.2.4
Jan 15, 2025 17:47:48.901335001 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.902442932 CET	50006	443	192.168.2.4	162.247.243.29
Jan 15, 2025 17:47:48.902462959 CET	443	50006	162.247.243.29	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 17:46:30.662489891 CET	53	58714	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:30.674956083 CET	53	63783	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:31.817179918 CET	53	55733	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:34.743437052 CET	55277	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:34.743736029 CET	50667	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:34.750458002 CET	53	55277	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:34.750499010 CET	53	50667	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:36.088570118 CET	58899	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:36.089071989 CET	63337	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:36.105439901 CET	53	63337	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:36.108207941 CET	53	58899	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:36.888881922 CET	63053	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:36.889076948 CET	49370	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:36.899131060 CET	53	63053	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:36.901993036 CET	53	49370	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:37.890314102 CET	138	138	192.168.2.4	192.168.2.255
Jan 15, 2025 17:46:38.933068037 CET	52370	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:38.933460951 CET	50645	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:38.934303999 CET	51434	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:38.934699059 CET	60237	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:38.940150976 CET	53	52370	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:38.941014051 CET	53	50645	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:38.941725969 CET	53	51434	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:38.942677021 CET	53	60237	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:39.687711000 CET	59201	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:39.687871933 CET	58690	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:39.694605112 CET	53	58690	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:39.695235014 CET	53	59201	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:39.797461987 CET	59308	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:39.797883987 CET	53209	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:39.805018902 CET	53	53209	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:39.805941105 CET	53	59308	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:39.863507986 CET	53	61158	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.489386082 CET	59947	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.489516973 CET	53471	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.492975950 CET	53652	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.493155956 CET	58512	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.496387959 CET	53	53471	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.496601105 CET	53	59947	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.500230074 CET	53	53652	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.500283003 CET	53	58512	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.550313950 CET	50566	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.550446033 CET	54477	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.557068110 CET	53	50566	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.559722900 CET	53	54477	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.643408060 CET	52432	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.643516064 CET	61314	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:40.650427103 CET	53	61314	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.650505066 CET	53	52432	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:40.650950909 CET	53	64629	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:41.427313089 CET	62474	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:41.427515984 CET	60027	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:41.434910059 CET	53	60027	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:41.435714960 CET	53	62474	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:42.239744902 CET	51665	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:42.239885092 CET	65274	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:42.246515989 CET	53	51665	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:42.246536016 CET	53	65274	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:42.260040998 CET	53	59121	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:43.241080046 CET	53	56922	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.106517076 CET	50101	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.106637955 CET	54580	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.107491016 CET	52287	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.107597113 CET	60247	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.113332987 CET	53	54580	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.113831043 CET	53	50101	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.115173101 CET	53	60247	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.126578093 CET	53	52287	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.870604038 CET	53969	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.870703936 CET	63520	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.877403975 CET	53	53969	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.877808094 CET	53	63520	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:46.886374950 CET	64814	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.886547089 CET	53960	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:46.893198967 CET	53	53960	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:47.157042980 CET	57712	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:47.157193899 CET	50375	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:47.164585114 CET	53	50375	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:47.180849075 CET	53	57712	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:47.543981075 CET	53417	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:47.544158936 CET	52390	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:46:47.550770044 CET	53	52390	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:47.551059008 CET	53	53417	1.1.1.1	192.168.2.4
Jan 15, 2025 17:46:48.759365082 CET	53	57393	1.1.1.1	192.168.2.4
Jan 15, 2025 17:47:07.530955076 CET	53	52477	1.1.1.1	192.168.2.4
Jan 15, 2025 17:47:30.219567060 CET	53	55146	1.1.1.1	192.168.2.4
Jan 15, 2025 17:47:30.408370018 CET	53	51188	1.1.1.1	192.168.2.4
Jan 15, 2025 17:47:48.314996004 CET	57931	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:47:48.315171957 CET	57176	53	192.168.2.4	1.1.1.1
Jan 15, 2025 17:47:48.322058916 CET	53	57931	1.1.1.1	192.168.2.4
Jan 15, 2025 17:47:48.322236061 CET	53	57176	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 17:46:34.743437052 CET	192.168.2.4	1.1.1.1	0x6ce8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:34.743736029 CET	192.168.2.4	1.1.1.1	0x6cb1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:36.088570118 CET	192.168.2.4	1.1.1.1	0xa50a	Standard query (0)	brightmorningteam.acemlna.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.089071989 CET	192.168.2.4	1.1.1.1	0xa93b	Standard query (0)	brightmorningteam.acemlna.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:36.888881922 CET	192.168.2.4	1.1.1.1	0xd83	Standard query (0)	brightmorningteam.activehosted.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.889076948 CET	192.168.2.4	1.1.1.1	0x7a69	Standard query (0)	brightmorningteam.activehosted.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:38.933068037 CET	192.168.2.4	1.1.1.1	0x14f9	Standard query (0)	fonts.bunny.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:38.933460951 CET	192.168.2.4	1.1.1.1	0xd6da	Standard query (0)	fonts.bunny.net	65	IN (0x0001)	false
Jan 15, 2025 17:46:38.934303999 CET	192.168.2.4	1.1.1.1	0x39fd	Standard query (0)	content.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:38.934699059 CET	192.168.2.4	1.1.1.1	0x8075	Standard query (0)	content.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:39.687711000 CET	192.168.2.4	1.1.1.1	0xa508	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:39.687871933 CET	192.168.2.4	1.1.1.1	0x558f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:39.797461987 CET	192.168.2.4	1.1.1.1	0xa2dd	Standard query (0)	diffuser-cdn.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:39.797883987 CET	192.168.2.4	1.1.1.1	0x5d25	Standard query (0)	diffuser-cdn.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:40.489386082 CET	192.168.2.4	1.1.1.1	0xfc43	Standard query (0)	diffuser-cdn.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.489516973 CET	192.168.2.4	1.1.1.1	0xd65e	Standard query (0)	diffuser-cdn.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:40.492975950 CET	192.168.2.4	1.1.1.1	0xadda	Standard query (0)	prism.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.493155956 CET	192.168.2.4	1.1.1.1	0xa088	Standard query (0)	prism.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:40.550313950 CET	192.168.2.4	1.1.1.1	0x6d5d	Standard query (0)	content.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.550446033 CET	192.168.2.4	1.1.1.1	0xf3b8	Standard query (0)	content.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:40.643408060 CET	192.168.2.4	1.1.1.1	0xe864	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.643516064 CET	192.168.2.4	1.1.1.1	0x7198	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:41.427313089 CET	192.168.2.4	1.1.1.1	0xd8f3	Standard query (0)	prism.app-us1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:41.427515984 CET	192.168.2.4	1.1.1.1	0xe783	Standard query (0)	prism.app-us1.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:42.239744902 CET	192.168.2.4	1.1.1.1	0xdb79	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:42.239885092 CET	192.168.2.4	1.1.1.1	0xae3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:46.106517076 CET	192.168.2.4	1.1.1.1	0x6e20	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.106637955 CET	192.168.2.4	1.1.1.1	0x79fb	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:46.107491016 CET	192.168.2.4	1.1.1.1	0x190f	Standard query (0)	d3rxaij56vjege.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.107597113 CET	192.168.2.4	1.1.1.1	0x2c17	Standard query (0)	d3rxaij56vjege.cloudfront.net	65	IN (0x0001)	false
Jan 15, 2025 17:46:46.870604038 CET	192.168.2.4	1.1.1.1	0xcfdc	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.870703936 CET	192.168.2.4	1.1.1.1	0x33ea	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 15, 2025 17:46:46.886374950 CET	192.168.2.4	1.1.1.1	0x317b	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.886547089 CET	192.168.2.4	1.1.1.1	0x5df	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 15, 2025 17:46:47.157042980 CET	192.168.2.4	1.1.1.1	0x711	Standard query (0)	d3rxaij56vjege.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.157193899 CET	192.168.2.4	1.1.1.1	0xb36	Standard query (0)	d3rxaij56vjege.cloudfront.net	65	IN (0x0001)	false
Jan 15, 2025 17:46:47.543981075 CET	192.168.2.4	1.1.1.1	0x926b	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.544158936 CET	192.168.2.4	1.1.1.1	0xd62c	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 15, 2025 17:47:48.314996004 CET	192.168.2.4	1.1.1.1	0x9cd5	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:47:48.315171957 CET	192.168.2.4	1.1.1.1	0xc5b5	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 17:46:34.750458002 CET	1.1.1.1	192.168.2.4	0x6ce8	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:34.750499010 CET	1.1.1.1	192.168.2.4	0x6cb1	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:36.108207941 CET	1.1.1.1	192.168.2.4	0xa50a	No error (0)	brightmorningteam.acemlna.com		54.82.80.250	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.108207941 CET	1.1.1.1	192.168.2.4	0xa50a	No error (0)	brightmorningteam.acemlna.com		54.235.205.181	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.108207941 CET	1.1.1.1	192.168.2.4	0xa50a	No error (0)	brightmorningteam.acemlna.com		54.225.69.136	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.108207941 CET	1.1.1.1	192.168.2.4	0xa50a	No error (0)	brightmorningteam.acemlna.com		34.237.253.202	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.899131060 CET	1.1.1.1	192.168.2.4	0xd83	No error (0)	brightmorningteam.activehosted.com		104.17.205.31	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.899131060 CET	1.1.1.1	192.168.2.4	0xd83	No error (0)	brightmorningteam.activehosted.com		104.17.203.31	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.899131060 CET	1.1.1.1	192.168.2.4	0xd83	No error (0)	brightmorningteam.activehosted.com		104.17.202.31	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.899131060 CET	1.1.1.1	192.168.2.4	0xd83	No error (0)	brightmorningteam.activehosted.com		104.17.204.31	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.899131060 CET	1.1.1.1	192.168.2.4	0xd83	No error (0)	brightmorningteam.activehosted.com		104.17.206.31	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:36.901993036 CET	1.1.1.1	192.168.2.4	0x7a69	No error (0)	brightmorningteam.activehosted.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:38.940150976 CET	1.1.1.1	192.168.2.4	0x14f9	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:38.940150976 CET	1.1.1.1	192.168.2.4	0x14f9	No error (0)	bunnyfonts.b-cdn.net		169.150.236.105	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:38.941014051 CET	1.1.1.1	192.168.2.4	0xd6da	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:38.941725969 CET	1.1.1.1	192.168.2.4	0x39fd	No error (0)	content.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:38.941725969 CET	1.1.1.1	192.168.2.4	0x39fd	No error (0)	content.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:38.942677021 CET	1.1.1.1	192.168.2.4	0x8075	No error (0)	content.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:39.694605112 CET	1.1.1.1	192.168.2.4	0x558f	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:39.695235014 CET	1.1.1.1	192.168.2.4	0xa508	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:39.805018902 CET	1.1.1.1	192.168.2.4	0x5d25	No error (0)	diffuser-cdn.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:39.805941105 CET	1.1.1.1	192.168.2.4	0xa2dd	No error (0)	diffuser-cdn.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:39.805941105 CET	1.1.1.1	192.168.2.4	0xa2dd	No error (0)	diffuser-cdn.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.496387959 CET	1.1.1.1	192.168.2.4	0xd65e	No error (0)	diffuser-cdn.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:40.496601105 CET	1.1.1.1	192.168.2.4	0xfc43	No error (0)	diffuser-cdn.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.496601105 CET	1.1.1.1	192.168.2.4	0xfc43	No error (0)	diffuser-cdn.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.500230074 CET	1.1.1.1	192.168.2.4	0xadda	No error (0)	prism.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.500230074 CET	1.1.1.1	192.168.2.4	0xadda	No error (0)	prism.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.500283003 CET	1.1.1.1	192.168.2.4	0xa088	No error (0)	prism.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:40.557068110 CET	1.1.1.1	192.168.2.4	0x6d5d	No error (0)	content.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.557068110 CET	1.1.1.1	192.168.2.4	0x6d5d	No error (0)	content.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:40.559722900 CET	1.1.1.1	192.168.2.4	0xf3b8	No error (0)	content.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:40.650427103 CET	1.1.1.1	192.168.2.4	0x7198	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:40.650505066 CET	1.1.1.1	192.168.2.4	0xe864	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:41.434910059 CET	1.1.1.1	192.168.2.4	0xe783	No error (0)	prism.app-us1.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:41.435714960 CET	1.1.1.1	192.168.2.4	0xd8f3	No error (0)	prism.app-us1.com		104.18.128.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:41.435714960 CET	1.1.1.1	192.168.2.4	0xd8f3	No error (0)	prism.app-us1.com		104.17.31.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:42.246515989 CET	1.1.1.1	192.168.2.4	0xdb79	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:42.246536016 CET	1.1.1.1	192.168.2.4	0xae3	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:46:46.113831043 CET	1.1.1.1	192.168.2.4	0x6e20	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.126578093 CET	1.1.1.1	192.168.2.4	0x190f	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.143	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.126578093 CET	1.1.1.1	192.168.2.4	0x190f	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.210	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.126578093 CET	1.1.1.1	192.168.2.4	0x190f	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.59	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.126578093 CET	1.1.1.1	192.168.2.4	0x190f	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.63	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.877403975 CET	1.1.1.1	192.168.2.4	0xcfdc	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:46.893181086 CET	1.1.1.1	192.168.2.4	0x317b	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:46.893181086 CET	1.1.1.1	192.168.2.4	0x317b	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:46.893198967 CET	1.1.1.1	192.168.2.4	0x5df	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:46.893198967 CET	1.1.1.1	192.168.2.4	0x5df	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:47.180849075 CET	1.1.1.1	192.168.2.4	0x711	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.59	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.180849075 CET	1.1.1.1	192.168.2.4	0x711	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.210	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.180849075 CET	1.1.1.1	192.168.2.4	0x711	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.63	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.180849075 CET	1.1.1.1	192.168.2.4	0x711	No error (0)	d3rxaij56vjege.cloudfront.net		18.245.45.143	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:46:47.550770044 CET	1.1.1.1	192.168.2.4	0xd62c	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:47.550770044 CET	1.1.1.1	192.168.2.4	0xd62c	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:47.551059008 CET	1.1.1.1	192.168.2.4	0x926b	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:47.551059008 CET	1.1.1.1	192.168.2.4	0x926b	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:46:47.551059008 CET	1.1.1.1	192.168.2.4	0x926b	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:47:48.322058916 CET	1.1.1.1	192.168.2.4	0x9cd5	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:47:48.322058916 CET	1.1.1.1	192.168.2.4	0x9cd5	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:47:48.322058916 CET	1.1.1.1	192.168.2.4	0x9cd5	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:47:48.322236061 CET	1.1.1.1	192.168.2.4	0xc5b5	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:47:48.322236061 CET	1.1.1.1	192.168.2.4	0xc5b5	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

brightmorningteam.acemlna.com

brightmorningteam.activehosted.com

https:

content.app-us1.com

fonts.bunny.net

diffuser-cdn.app-us1.com

www.google.com

prism.app-us1.com

js-agent.newrelic.com

d3rxaij56vjege.cloudfront.net

bam.nr-data.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49747	54.82.80.250	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:36 UTC	757	OUT	GET /lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa HTTP/1.1 Host: brightmorningteam.acemlna.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:36 UTC	345	IN	HTTP/1.1 307 Temporary Redirect cache-control: public, max-age=2628000 location: https://brightmorningteam.activehosted.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa date: Wed, 15 Jan 2025 16:46:36 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49750	104.17.205.31	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:37 UTC	762	OUT	GET /lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa HTTP/1.1 Host: brightmorningteam.activehosted.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:37 UTC	1318	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 16:46:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close location: https://brightmorningteam.activehosted.com/f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter Cache-Control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache Set-Cookie: PHPSESSID=b9a06b09005a9b79715498452db0aa11; path=/; secure; HttpOnly; SameSite=Lax x-content-type-options: nosniff x-privacy-policy: You can find our privacy policy here: https://www.activecampaign.com/help/privacy-policy/ x-request-id: 62edd8187b58a0f7b403bd2dfb8f9d38 x-robots-tag: noindex CF-Cache-Status: DYNAMIC Set-Cookie: cmp1002421028=cac6fe7aae12600ddd5aad7d35539d3d; expires=Fri, 14-Feb-2025 16:46:37 GMT; Max-Age=2592000; path=/; domain=.brightmorningteam.activehosted.com; secure; SameSite=Lax Set-Cookie: __cf_bm=CXxpCkriJkyztbw511PsFob4a8dfiIn0gxcMk4w4FEg-1736959597-1.0.1.1-BkXAykHCgwHNPIrxsbxGvonLIhp8DasUlErREFG543mcOf34W6nJC1aMasCVyj4zF6KDnmBcwkD9v6C810iigQ; path=/; expires=Wed, 15-Jan-25 17:16:37 GMT; domain=.activehosted.com; HttpOnly; Secure; SameSite=None
2025-01-15 16:46:37 UTC	125	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 37 35 37 63 63 30 61 30 62 31 38 65 65 2d 45 57 52 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadServer: cloudflareCF-RAY: 902757cc0a0b18ee-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	104.17.205.31	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:38 UTC	1154	OUT	GET /f/158?s=c7bc722fa31ed07a45768c9be8733ff5&nl=1&c=1728&m=9908&utm_source=ActiveCampaign&utm_medium=email&utm_content=Neuroscience%20tips%20for%20better%20team%20leadership&utm_campaign=M%2C%201%2F13%2F25%20-%20Newsletter HTTP/1.1 Host: brightmorningteam.activehosted.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b9a06b09005a9b79715498452db0aa11; cmp1002421028=cac6fe7aae12600ddd5aad7d35539d3d; __cf_bm=CXxpCkriJkyztbw511PsFob4a8dfiIn0gxcMk4w4FEg-1736959597-1.0.1.1-BkXAykHCgwHNPIrxsbxGvonLIhp8DasUlErREFG543mcOf34W6nJC1aMasCVyj4zF6KDnmBcwkD9v6C810iigQ
2025-01-15 16:46:38 UTC	971	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=120 content-security-policy: upgrade-insecure-requests;report-uri /csp/ content-security-policy-report-only: default-src https: 'self';font-src https: data: 'self';script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' https:;script-src-elem 'unsafe-inline' https:;style-src 'unsafe-inline' https:;style-src-elem 'unsafe-inline' https:;img-src https: blob: data:;connect-src https: wss:;worker-src https: blob:;form-action 'self';block-all-mixed-content;report-uri /csp/ expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-content-type-options: nosniff x-request-id: 7aa080c9d748abf273e872e620337a99 x-xss-protection: 1; mode=block CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757d17cf1c3f5-EWR
2025-01-15 16:46:38 UTC	398	IN	Data Raw: 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 33 72 78 61 69 6a 35 36 76 6a 65 67 65 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 6d 65 64 69 61 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 Data Ascii: ffa<!DOCTYPE html><html lang="en"><head> <link rel="icon" href="https://d3rxaij56vjege.cloudfront.net/media/favicon.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta http-equiv="Content-Type
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 79 5f 6c 69 73 74 3a 5b 22 61 70 69 2e 63 61 6e 64 75 2e 61 69 22 2c 22 63 6f 6c 6c 65 63 74 2d 75 73 2e 61 70 70 2d 75 73 31 2e 63 6f 6d 22 2c 22 73 6f 63 6b 6a 73 2e 70 75 73 68 65 72 2e 63 6f 6d 22 2c 22 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 2c 22 6a 73 2d 61 67 65 6e 74 2e 6e 65 77 72 65 6c 69 63 2e 63 6f 6d 22 5d 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 30 2e 30 2c 6d 6f 64 65 3a 22 46 49 58 45 44 5f 52 41 54 45 22 2c 65 6e 61 62 6c 65 64 3a 74 72 75 65 2c 65 72 72 6f 72 5f 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 30 2e 30 7d 2c 64 69 73 74 72 69 62 75 74 65 64 5f 74 72 61 63 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e Data Ascii: y_list:["api.candu.ai","collect-us.app-us1.com","sockjs.pusher.com","www.google-analytics.com","js-agent.newrelic.com"]},session_trace:{sampling_rate:0.0,mode:"FIXED_RATE",enabled:true,error_sampling_rate:0.0},distributed_tracing:{enabled:true}};(window.N
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 63 28 65 29 3b 72 65 74 75 72 6e 21 21 74 2e 6c 69 63 65 6e 73 65 4b 65 79 26 26 21 21 74 2e 65 72 72 6f 72 42 65 61 63 6f 6e 26 26 21 21 74 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f Data Ascii: roduct:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)thro
2025-01-15 16:46:38 UTC	961	IN	Data Raw: 74 75 72 65 5f 66 6c 61 67 73 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 65 61 74 75 72 65 5f 66 6c 61 67 73 7d 2c 73 65 74 20 66 65 61 74 75 72 65 5f 66 6c 61 67 73 28 74 29 7b 65 2e 66 65 61 74 75 72 65 5f 66 6c 61 67 73 3d 74 7d 2c 67 65 6e 65 72 69 63 5f 65 76 65 6e 74 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 69 6e 74 65 72 76 61 6c 3a 33 30 7d 2c 6a 73 65 72 72 6f 72 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6c 6f 67 67 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 2c 6c 65 76 65 6c 3a 69 2e 70 5f 2e 49 4e 46 4f 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a Data Ascii: ture_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},harvest:{interval:30},jserrors:{enabled:!0,autoStart:!0},logging:{enabled:!0,autoStart:!0,level:i.p_.INFO},metrics:{enabled:!0,autoStart:
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 36 35 38 38 0d 0a 65 73 4d 73 3a 61 2e 77 6b 2c 69 6e 61 63 74 69 76 65 4d 73 3a 61 2e 42 42 7d 2c 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 3a 7b 61 75 74 6f 53 74 61 72 74 3a 21 30 2c 65 6e 61 62 6c 65 64 3a 21 31 2c 70 72 65 6c 6f 61 64 3a 21 31 2c 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 31 30 2c 65 72 72 6f 72 5f 73 61 6d 70 6c 69 6e 67 5f 72 61 74 65 3a 31 30 30 2c 63 6f 6c 6c 65 63 74 5f 66 6f 6e 74 73 3a 21 31 2c 69 6e 6c 69 6e 65 5f 69 6d 61 67 65 73 3a 21 31 2c 66 69 78 5f 73 74 79 6c 65 73 68 65 65 74 73 3a 21 30 2c 6d 61 73 6b 5f 61 6c 6c 5f 69 6e 70 75 74 73 3a 21 30 2c 67 65 74 20 6d 61 73 6b 5f 74 65 78 74 5f 73 65 6c 65 63 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 73 6b 5f 73 65 6c 65 63 74 6f 72 7d 2c 73 65 74 20 6d 61 73 6b 5f Data Ascii: 6588esMs:a.wk,inactiveMs:a.BB},session_replay:{autoStart:!0,enabled:!1,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_selector},set mask_
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 6e 20 72 7d 7d 2c 35 36 30 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 61 3a 28 29 3d 3e 63 2c 6f 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6e 3d 72 28 33 38 34 29 2c 69 3d 72 28 38 31 32 32 29 3b 63 6f 6e 73 74 20 6f 3d 7b 61 63 63 6f 75 6e 74 49 44 3a 76 6f 69 64 20 30 2c 74 72 75 73 74 4b 65 79 3a 76 6f 69 64 20 30 2c 61 67 65 6e 74 49 44 3a 76 6f 69 64 20 30 2c 6c 69 63 65 6e 73 65 4b 65 79 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 78 70 69 64 3a 76 6f 69 64 20 30 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 6c 6f 61 64 65 72 2d 63 6f 6e 66 69 67 20 6f 62 6a 65 Data Ascii: n r}},5603:(e,t,r)=>{"use strict";r.d(t,{a:()=>c,o:()=>s});var n=r(384),i=r(8122);const o={accountID:void 0,trustKey:void 0,agentID:void 0,licenseKey:void 0,applicationID:void 0,xpid:void 0},a={};function s(e){if(!e)throw new Error("All loader-config obje
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 6d 65 3d 64 5b 65 5d 29 7d 7d 2c 39 33 32 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 46 33 3a 28 29 3d 3e 69 2c 58 73 3a 28 29 3d 3e 6f 2c 59 71 3a 28 29 3d 3e 61 2c 78 76 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 22 31 2e 32 37 38 2e 32 22 2c 69 3d 22 50 52 4f 44 22 2c 6f 3d 22 43 44 4e 22 2c 61 3d 22 5e 32 2e 30 2e 30 2d 61 6c 70 68 61 2e 31 37 22 7d 2c 36 31 35 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 41 34 3a 28 29 3d 3e 73 2c 4f 46 3a 28 29 3d 3e 64 2c 52 49 3a 28 29 3d 3e 69 2c 57 4e 3a 28 29 3d 3e 68 2c 62 76 3a 28 29 3d 3e 6f 2c 67 6d 3a 28 29 3d 3e 61 2c 6c 52 3a 28 29 3d 3e 66 2c 6d 3a 28 29 3d 3e 75 2c 6d 77 3a 28 29 3d 3e 63 2c Data Ascii: me=d[e])}},9324:(e,t,r)=>{"use strict";r.d(t,{F3:()=>i,Xs:()=>o,Yq:()=>a,xv:()=>n});const n="1.278.2",i="PROD",o="CDN",a="^2.0.0-alpha.17"},6154:(e,t,r)=>{"use strict";r.d(t,{A4:()=>s,OF:()=>d,RI:()=>i,WN:()=>h,bv:()=>o,gm:()=>a,lR:()=>f,m:()=>u,mw:()=>c,
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 61 6d 65 29 26 26 63 28 72 2e 70 61 74 68 6e 61 6d 65 2c 65 2e 70 61 74 68 6e 61 6d 65 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 2e 68 6f 73 74 6e 61 6d 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 6e 3d 5b 5d 2c 65 26 26 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 6c 65 74 20 72 3d 65 5b 74 5d 3b 69 66 28 21 72 29 63 6f 6e 74 69 6e 75 65 3b 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 2f 2f 22 29 3f 72 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 37 29 3a 30 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 3a 2f 2f 22 29 26 26 28 72 3d 72 2e 73 75 62 Data Ascii: ame)&&c(r.pathname,e.pathname))return!1}return!0}function o(e){return void 0===e.hostname}function a(e){if(n=[],e&&e.length)for(var t=0;t<e.length;t++){let r=e[t];if(!r)continue;0===r.indexOf("http://")?r=r.substring(7):0===r.indexOf("https://")&&(r=r.sub
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 65 74 20 74 3d 30 3b 65 26 26 74 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 74 29 70 28 65 5b 74 5d 2c 72 29 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 72 29 2e 66 6f 72 45 61 63 68 28 28 28 5b 65 2c 74 5d 29 3d 3e 7b 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 74 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 5b 30 5d 3f 2e 6f 6e 26 26 74 5b 30 5d 3f 2e 63 6f 6e 74 65 78 74 28 29 69 6e 73 74 61 6e 63 65 6f 66 20 61 2e 79 26 26 74 5b 30 5d 2e 6f 6e 28 65 2c 74 5b 31 5d 29 7d 29 29 7d 29 29 7d 7d 6f 2e 69 73 6f 6c 61 74 65 64 42 61 63 6b 6c 6f 67 7c 7c 64 65 6c 65 74 65 20 73 5b 74 5d 2c 6f 2e 62 61 63 6b 6c 6f 67 5b 74 5d 3d 6e 75 6c 6c 2c 6f 2e 65 6d 69 74 28 22 64 72 61 69 6e 2d 22 2b 74 2c 5b 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c Data Ascii: et t=0;e&&t<e.length;++t)p(e[t],r);Object.entries(r).forEach((([e,t])=>{Object.values(t\|\|{}).forEach((t=>{t[0]?.on&&t[0]?.context()instanceof a.y&&t[0].on(e,t[1])}))}))}}o.isolatedBacklog\|\|delete s[t],o.backlog[t]=null,o.emit("drain-"+t,[])}}function p(e,
2025-01-15 16:46:38 UTC	1369	IN	Data Raw: 74 65 64 22 2c 7b 67 65 74 3a 28 29 3d 3e 7b 6c 65 74 20 65 3d 66 2e 5f 61 62 6f 72 74 65 64 7c 7c 21 31 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 26 26 28 65 3d 74 2e 61 62 6f 72 74 65 64 29 2c 65 29 7d 7d 29 2c 66 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 2e 79 3f 65 3a 65 3f 28 30 2c 69 2e 49 29 28 65 2c 63 2c 28 28 29 3d 3e 6e 65 77 20 61 2e 79 28 63 29 29 29 3a 6e 65 77 20 61 2e 79 28 63 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 6e 5b 65 5d 3d 67 28 65 29 2e 63 6f 6e 63 61 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 7c 7c 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 64 5b 74 5d 3d 64 5b 74 5d 7c Data Ascii: ted",{get:()=>{let e=f._aborted\|\|!1;return e\|\|(t&&(e=t.aborted),e)}}),f;function h(e){return e&&e instanceof a.y?e:e?(0,i.I)(e,c,(()=>new a.y(c))):new a.y(c)}function p(e,t){n[e]=g(e).concat(t)}function g(e){return n[e]\|\|[]}function m(t){return d[t]=d[t]\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49753	104.17.31.174	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:39 UTC	654	OUT	GET /ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png HTTP/1.1 Host: content.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:39 UTC	565	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:39 GMT Content-Type: image/png Content-Length: 1090816 Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1833813 etag: "ae75a3120de31de40002577de07f7347" last-modified: Thu, 07 Nov 2024 02:35:34 GMT x-envoy-upstream-service-time: 116 CF-Cache-Status: HIT Age: 191808 Expires: Thu, 15 Jan 2026 16:46:39 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757d8eda28c30-EWR
2025-01-15 16:46:39 UTC	804	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 04 ec 08 02 00 00 00 6d aa 70 72 00 10 a4 c7 49 44 41 54 78 da ec dd 5b 6e 14 6b 12 45 e1 3f 4b cc 7f 58 07 8e e9 81 70 e9 21 34 64 d7 05 03 32 be 60 29 b6 14 e1 fc 4a e1 e5 55 eb 61 4f 20 95 f6 fa f8 f5 fb 7f fe bb df ee e3 95 b7 d3 f5 23 f4 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 7f be af f3 8f 73 ce 39 e7 9c 73 ce 39 e7 9c 73 ce 39 e7 9c 7b e6 4e fb be ce 9f fd fa 8b f3 e3 79 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 fe b7 be 6e 6f ac 20 22 22 22 22 22 22 22 22 22 22 22 e2 53 7c b7 ef fb b6 6d 88 88 88 88 88 88 88 88 88 88 88 88 f8 14 4f eb 62 6b bb Data Ascii: PNGIHDRpmprIDATx[nkE?KXp!4d2`)JUaO #we]sus-z[={nYs9s9s9{NySv)^]\|q>k8kO5no """""""""""S\|mObk
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 90 f3 c3 79 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 fe d7 be fe bd 1a 22 22 22 22 22 22 22 22 22 22 22 22 3e c5 75 f7 e5 6a f7 bc bb 77 5d 3f 54 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 f5 47 fb 69 5f fb f6 eb 4f 81 ed eb de 75 fd ed f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 7f a9 af 7f 7f 7b d2 c2 f9 d1 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 ce a7 78 ed 1a ff 7b 3f ad 1f 4f b4 f6 33 39 3f 9a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 ce a7 78 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 Data Ascii: ySv)^]\|q>k8kO5"""""""""""">ujw]?T-z[={nY;we]sGi_Ouwe]sus-z[={nY{v)^]\|q>k8kO5x{?O39?q>k8kO5xSv)^
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 bf d1 c7 db 0f 47 43 44 44 44 44 44 44 44 44 44 44 44 c4 4b 1c db a3 ca d9 36 d9 f8 e8 ba fe f2 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac df ea e3 d7 93 21 22 22 22 22 22 22 22 22 22 22 22 e2 25 1e 96 65 19 eb ba 8c 0d eb 83 2f 9b eb fa 8b ef b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 7e b3 df d5 fe 8f 7b 44 44 44 44 44 44 44 44 44 44 44 c4 97 c7 e3 9f fc da ee ed 87 7f 37 3e f8 91 ba be 87 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb d7 fb d3 ff 50 d9 7e c7 f9 be bc 76 8d Data Ascii: us-z[={nYGCDDDDDDDDDDDK6{nY;we]sus-z[=!"""""""""""%e/e]sus-z[={nY;~{DDDDDDDDDDD7>[={nY;we]sus-P~v
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 cf f1 bb 75 5d 97 65 41 44 44 44 44 44 44 44 44 44 44 44 c4 4b 7c fa 84 ca ab 8d 9b 3f 50 d7 77 d2 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 fd 4a 1f af de fd bd 19 22 22 22 22 22 22 22 22 6e fc f9 b7 df bf f9 fe 87 af be fe f6 bb 1f 7f fa e5 8f bf 0a 97 11 11 11 71 6a 6e 0f 2a 9f 6c 13 ce 77 e6 b5 6b 9c cf e2 b5 6b 9c ff c7 be dd 84 44 11 c6 61 00 7f 67 70 45 a5 10 24 89 48 13 16 26 12 24 89 22 d0 2e 51 5d 22 10 82 82 88 0e 81 05 15 74 28 2a 4f 1d 0a 3a 29 05 15 44 d2 21 48 21 a1 0f 16 13 b4 b0 14 3b b4 6d 59 2e b1 22 89 6b db ae 19 44 ec ce c7 ee cc bc ef cc 36 ae 7a 08 3f f0 f0 8e ee b8 cf 9f e5 c7 c3 c3 f0 7f 5f f6 Data Ascii: ]\|]\|]\|]\|]u]eADDDDDDDDDDDK\|?Pwsus-z[={nY;weJ""""""""nqjnlwkkDagpE$H&$".Q]"t(O:)D!H!;mY."kD6z?_
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 8f 0a 0a 21 0d 10 a7 54 f1 ed 47 b7 7e 49 ed 37 56 d6 36 a4 16 d2 55 1e ee 75 85 fa b9 45 a5 83 47 8e 79 74 45 43 2b b0 55 d8 cf 4a 59 76 f8 cb bf 31 76 a8 70 70 24 83 42 7c 7a 96 a0 27 f5 ac ff e8 0f d3 a0 30 64 54 80 88 79 c0 9e 0f 5f 0b fe e6 83 27 49 26 1c 9c 5c 8e 7e 75 4b 50 3f 58 f9 f0 e1 63 e5 c3 87 8f 95 af cf 3e 3d 3e 63 01 83 c1 60 b0 c1 f1 30 bf 40 d2 57 78 f5 19 58 f0 e1 09 be e3 05 83 c1 82 58 c3 d3 d9 38 65 26 df 7e 74 cb f1 e9 59 d4 1a c2 7e 3a 9f 63 45 71 5c 79 ad 31 a7 70 9f 57 df 81 a4 0b b4 ef d4 75 63 71 25 4b 9f 93 22 67 93 41 21 34 3a 81 ef 93 7a 21 67 14 ec 20 83 82 47 4f 6f be 33 00 06 6b 8d 47 4f 9a 4a f2 31 ff ad 77 38 f6 00 06 83 c1 60 30 d8 50 98 aa 1b 9a 9a 55 93 24 a0 a1 8d 4b f3 cd 06 0d ad 75 7d f8 cb 9b 93 66 cc 36 35 35 Data Ascii: !TG~I7V6UuEGytEC+UJYv1vpp$B\|z'0dTy_'I&\~uKP?Xc>=>c`0@WxXX8e&~tY~:cEq\y1pWucq%K"gA!4:z!g GOo3kGOJ1w8`0PU$Ku}f655
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 5f 8f 1c 17 4c 6c 70 72 75 e3 3b 5e ec f9 46 e8 ef ac 68 71 2b ee d0 b5 bb b8 ba 8f f5 d4 d8 64 62 80 85 a5 65 de 9e 23 1c eb f2 f7 c5 65 86 0f 5f 9f 7d 71 99 e1 c3 d7 67 5f 5c 66 f8 2d fb b8 a1 82 40 20 10 2f 4f c8 7a 6f 9d 87 97 4f 9b 0b 6d 3f 76 d6 d3 bb 0f c9 47 4c ea 0a 8e e3 45 20 10 e2 62 f4 a4 a9 f4 04 46 70 43 25 f8 8d 78 92 8f 82 03 c7 39 f6 d0 b6 28 fe fd d5 ae 3d 7a 11 33 a4 dd fb 83 53 17 34 af 1b 9b a6 22 66 8c 9f 36 53 56 f2 c5 ab 37 12 33 7c c7 04 31 e4 64 ba 7f 33 26 38 9c 18 30 26 58 37 37 54 76 55 d4 10 33 2c ad ac 78 d5 95 ae a8 b2 1c 37 3a ba b4 e3 38 58 84 71 46 6a ce 06 1d 2e b0 ca 6b 8d 01 21 11 a4 16 66 e6 e6 39 85 fb 38 16 45 20 10 08 04 02 61 70 41 55 f5 f7 1f 9f b1 48 0c 0d 6d 7c 9a 6f 36 68 68 1d eb bc dd 65 c4 0c 0f 2f 6f 4d Data Ascii: _Llpru;^Fhq+dbe#e_}qg_\f-@ /OzoOm?vGLE bFpC%x9(=z3S4"f6SV73\|1d3&80&X77TvU3,x7:8XqFj.k!f98E apAUHm\|o6hhe/oM
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 31 9d ab 6f f4 e6 fa 54 ac 64 99 33 b2 36 d7 35 b5 90 bd 0c b7 5b ae be ae 93 84 94 bc 81 a7 eb 1a ec 86 54 02 fe 69 a5 cf 33 42 ae 59 2c 2c c6 be cb 5c 56 7d 32 c7 57 40 36 0a 4c 4f f1 ee 17 67 7e f2 e4 41 d3 7c de fb c8 f9 2f 3d c1 72 75 95 91 23 8f e5 5c 5d 65 e4 c8 63 39 57 57 19 f9 9a b9 1e 5a a4 c5 2b ad 30 11 72 e4 89 9f ab ab 8c 1c f9 7a e5 72 13 2a 3c 2b 49 71 bb b7 e5 e4 91 8c 7e fd 18 53 f5 04 90 23 c7 99 cf 94 1b 46 0a 09 4a 23 c6 be 0e e7 5d b7 5a 29 6a f5 3e b8 b7 30 3f af 74 9d e1 79 5b 73 c3 d7 d1 8f 24 a6 1d 85 45 55 67 ce 2b 5a 49 78 5e 5a 51 7d e0 68 25 d9 28 3d 73 93 54 7d b2 ae 12 52 f2 06 7a 73 f3 4b cb ab 6c 7e a8 fc 56 fd 3c ed 72 29 31 f6 5d 66 97 cb 55 53 7b 81 6c 14 f0 fb 79 f7 8b 33 3f 79 f2 de ee ce 9f e3 df 9c ff d2 13 2d 57 Data Ascii: 1oTd365[Ti3BY,,\V}2W@6LOg~A\|/=ru#\]ec9WWZ+0rzr*<+Iq~S#FJ#]Z)j>0?ty[s$EUg+ZIx^ZQ}h%(=sT}RzsKl~V<r)1]fUS{ly3?y-W
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 04 6f 7a 60 cf 41 78 e5 f1 2c ea b6 6c df b4 53 ef 36 bd 87 74 19 32 0e 2f 17 8e 5e 3b 4f df 91 6d d7 d0 e6 6e c7 d0 86 36 2b df af 68 fa 83 fa 2a e5 19 a4 d6 86 6f f8 99 9f af 4f b2 e1 1b be 8f f8 aa 0a 15 a9 9e 94 2a 5f 89 d8 c0 f7 b0 be 19 d8 70 e4 3c ae 5d 5e 2e 5b 1e 97 9b e4 0d 4f e6 c8 89 6b b8 3e e3 82 23 8f 5d b2 d0 ee 9e 73 5f 4f 5b bd 0d e1 74 06 4c 9a 17 34 69 5e fa 7a f2 3c 26 7f f4 82 b5 a1 fb 92 54 c7 1b f9 c1 a5 89 cb 37 0d 9e b6 48 b5 5d 7c 8d 4f 5c ba 31 3c f1 9c c8 fc 43 37 36 64 fa e2 6a 8d 5a e2 b1 12 0f 39 9f ca 53 a9 76 c3 3e 63 67 62 b9 ea 7e 23 9c 39 e1 09 e7 70 3d 97 27 5f 7e 4a 83 e6 5d fa 79 96 10 77 f5 ee 98 45 61 d5 1a b6 c4 bd 30 79 c4 df 1e 7b ec ad 3a 8d c6 2f 8e 38 70 e9 3b ed 23 72 cf c7 15 70 87 a0 51 c5 4b 96 21 06 f2 Data Ascii: oz`Ax,lS6t2/^;Omn6+hoO_p<]^.[Ok>#]s_O[tL4i^z<&T7H]\|O\1<C76djZ9Sv>cgb~#9p='_~J]ywEa0y{:/8p;#rpQK!
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: af 57 a9 55 ec 95 d2 79 9e 79 d6 f9 e2 1b 27 96 64 ed f2 7f 38 a7 3b 68 7a e0 e8 5c ba 42 65 af 0f 1a 8e 77 b2 cf 0b 34 82 d1 c1 cb aa a0 fc 11 6b 14 1c 2c 64 7b 8b a7 09 1d 3f fc 51 38 47 2c 44 99 73 92 23 f0 e6 16 2e fe f2 f2 e8 63 b2 e3 4a 4b c3 4b 35 59 4b 24 06 7c 3b f4 1a 35 2d c3 76 80 ac 46 cb 4a 33 b4 a1 1f 16 5a 56 9a a1 95 68 c2 1f a6 98 62 8a 29 a6 64 8e 62 c1 43 c5 7e c1 f5 3a b1 01 9b 32 47 04 64 91 82 1b b7 12 65 5e 27 51 e0 53 1c e6 72 0e 13 75 77 e5 e0 e7 df 67 7b fc 09 12 05 3e dd 1d 96 6b 5e 0b 4c 44 49 08 cb f7 1c 53 9a 70 58 e6 e2 c2 82 f4 20 f7 d3 cf 20 ac 96 23 c3 8a e5 82 d5 85 28 2e b0 5b 84 8d b3 92 d2 6b cb c9 6b e9 1e 71 95 fa cd 48 02 01 01 01 48 e4 23 f8 9a 3b 17 5c 55 54 ac 51 9f 7c 07 dc 6a 09 0e 27 03 0a 96 19 36 40 97 79 Data Ascii: WUyy'd8;hz\Bew4k,d{?Q8G,Ds#.cJKK5YK$\|;5-vFJ3ZVhb)dbC~:2Gde^'QSruwg{>k^LDISpX #(.[kkqHH#;\UTQ\|j'6@y
2025-01-15 16:46:39 UTC	1369	IN	Data Raw: 43 70 86 11 48 ed 95 72 15 89 07 9c 00 61 57 11 34 79 c1 d4 55 5b 71 40 9a 1c ba b9 f7 98 99 55 1b b4 b0 a0 f1 c2 2f 11 a7 9f 91 1f f8 52 a1 d2 6d f8 a4 74 fd 59 13 fb 31 d9 03 fc 96 ec 3f bb 55 07 3f cc ad 76 c4 1a 33 74 e6 d2 e0 f0 68 e4 2f 19 bf 64 83 e5 23 56 c8 f6 c3 fc de f2 de 5c ef 1e 2a 3b 4f 6b 3e 62 ed 48 b4 f9 44 70 76 65 7a e1 14 7e f1 e5 fa 81 9d de e9 3b bc eb b0 89 c8 36 5f f6 cd aa aa 4e 6c f8 99 16 df 63 b3 3c 2d 2b cd d0 86 7e 58 68 59 69 86 56 a0 e9 48 ea 33 40 49 a5 0d df f0 b3 02 5f 9f 64 c3 37 7c 9f f0 37 28 7a a8 d8 6c b1 55 f7 20 62 03 e6 81 f6 47 8a 2f 4f 8e 1b 3e be 39 91 e4 d6 9d 1c 04 e4 19 3c 3d 24 ef 33 05 88 01 44 9d 46 74 02 cf fd 5c 9f f0 89 b5 ac f8 55 1b b6 b0 f9 c4 57 c7 9c 42 e4 77 62 03 c9 60 11 ed 81 2f 1f 51 e3 91 Data Ascii: CpHraW4yU[q@U/RmtY1?U?v3th/d#V\*;Ok>bHDpvez~;6_Nlc<-+~XhYiVH3@I_d7\|7(zlU bG/O>9<=$3DFt\UWBwb`/Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	169.150.236.105	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:39 UTC	575	OUT	GET /css?family=open-sans:400,700 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:39 UTC	977	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:39 GMT Content-Type: text/css; charset=utf-8 Content-Length: 12316 Connection: close Vary: Accept-Encoding Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Alt-Svc: h3=":443" Cache-Control: public, max-age=2592000 Last-Modified: Wed, 18 Dec 2024 12:47:41 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:47:41 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: b31a5ded2b82bffc615b60389c0cab03 CDN-Cache: HIT Accept-Ranges: bytes
2025-01-15 16:46:39 UTC	12316	IN	Data Raw: 2f 2a 20 6d 61 74 68 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 6f 70 65 6e 2d 73 61 6e 73 2f 66 69 6c 65 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6d 61 74 68 2d 34 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 6f 70 65 6e 2d 73 61 6e 73 2f Data Ascii: /* math */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; font-stretch: 100%; src: url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2) format('woff2'), url(https://fonts.bunny.net/open-sans/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49759	104.17.31.174	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	562	OUT	GET /diffuser/diffuser.js HTTP/1.1 Host: diffuser-cdn.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	678	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Sep 2024 15:47:53 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=300 etag: W/"234346615b452270c8ee1158258c83bb" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 22faf6fcae096ee97264521770b65762.cloudfront.net (CloudFront) x-amz-cf-pop: ATL59-P4 x-amz-cf-id: 3X5F4wNQyXOuozUuyXygS-zomSQMh8Qwa322gb98nB8WpVm2PA37cg== CF-Cache-Status: HIT Age: 36 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757de1c790f73-EWR
2025-01-15 16:46:40 UTC	691	IN	Data Raw: 37 63 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 74 2c 5f 5f 77 65 62 70 61 63 6b Data Ascii: 7cfa!function(e){var t={};function __webpack_require__(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,__webpack_require__),n.l=!0,n.exports}__webpack_require__.m=e,__webpack_require__.c=t,__webpack
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 72 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3d 66 75 6e 63 74 Data Ascii: ;var r=Object.create(null);if(__webpack_require__.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)__webpack_require__.d(r,n,function(t){return e[t]}.bind(null,n));return r},__webpack_require__.n=funct
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 65 3d 3d 3d 6f 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 63 61 6c 6c 2c 63 3d 6e 26 26 6f 2e 62 69 6e 64 2e 62 69 6e 64 28 69 2c 69 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 Data Ascii: nction(e){return"function"==typeof e\|\|e===o}:function(e){return"function"==typeof e}},function(e,t,r){var n=r(9),o=Function.prototype,i=o.call,c=n&&o.bind.bind(i,i);e.exports=n?c:function(e){return function(){return i.apply(e,arguments)}}},function(e,t,r)
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 72 74 73 3d 6e 26 26 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 33 34 29 2c 6f 3d 72 28 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6e 26 26 6e 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 Data Ascii: rts=n&&!Symbol.sham&&"symbol"==typeof Symbol.iterator},function(e,t,r){var n=r(34),o=r(3);e.exports=!!Object.getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&n&&n<41}))},function(e,t,r){va
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 74 29 3b 6e 26 26 6e 2e 77 72 69 74 61 62 6c 65 26 26 28 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 2c 72 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 22 65 6e 75 6d 65 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3a 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 72 29 7d 3a 75 3a 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 72 29 7b 69 66 28 63 28 65 29 2c 74 3d 61 28 74 29 2c 63 28 72 29 2c 6f 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 72 Data Ascii: t);n&&n.writable&&(e[t]=r.value,r={configurable:"configurable"in r?r.configurable:n.configurable,enumerable:"enumerable"in r?r.enumerable:n.enumerable,writable:!1})}return u(e,t,r)}:u:function defineProperty(e,t,r){if(c(e),t=a(t),c(r),o)try{return u(e,t,r
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 73 2c 65 2c 74 29 2c 21 6f 28 72 29 7c 7c 69 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 75 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 61 28 65 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 30 29 2c 63 3d 72 28 33 35 29 2c 61 3d 69 2e 70 72 6f 63 65 73 73 2c 73 3d 69 2e 44 65 6e 6f 2c 75 3d 61 26 26 61 2e 76 65 72 73 69 6f 6e 73 7c 7c Data Ascii: s,e,t),!o(r)\|\|i(r))return r;throw u("Can't convert object to primitive value")}return void 0===t&&(t="number"),a(e,t)}},function(e,t,r){var n=r(5);e.exports=n({}.isPrototypeOf)},function(e,t,r){var n,o,i=r(0),c=r(35),a=i.process,s=i.Deno,u=a&&a.versions\|\|
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 34 32 29 2c 6f 3d 72 28 34 33 29 3b 28 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7c 7c 28 6f 5b 65 5d 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 7b 7d 29 7d 29 28 22 76 65 72 73 69 6f 6e 73 22 2c 5b 5d 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 32 36 2e 31 22 2c 6d 6f 64 65 3a 6e 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 32 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 Data Ascii: tion(e,t,r){var n=r(42),o=r(43);(e.exports=function(e,t){return o[e]\|\|(o[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.26.1",mode:n?"pure":"global",copyright:" 2014-2022 Denis Pushkarev (zloirock.ru)",license:"https://github.com/zloirock/core-js
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 78 70 28 22 5b 5c 5c 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 23 5d 2a 29 22 29 2e 65 78 65 63 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 3f 22 22 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 2c 67 65 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 56 67 6f 50 61 72 61 6d 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 2c 67 65 74 50 61 74 68 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 74 68 6e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d Data Ascii: xp("[\\?&]"+e+"=([^&#]*)").exec(window.location.search);return null===t?"":decodeURIComponent(t[1].replace(/\+/g," "))},getLocation:function getLocation(){return this.removeVgoParam(window.location.href)},getPathname:function getPathname(){return this.rem
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 69 2e 61 5b 65 5d 2e 64 6f 6d 61 69 6e 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 6e 65 63 74 28 29 7b 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 28 29 7b 7d 7d 5d 29 2c 53 65 72 76 69 63 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: .name.toLowerCase();return i.a[e].domain}},{key:"connect",value:function connect(){}},{key:"update",value:function update(){}}]),Service}();function _typeof(e){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return t
2025-01-15 16:46:40 UTC	1369	IN	Data Raw: 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 53 75 70 65 72 49 6e 74 65 72 6e 61 6c 28 29 7b 76 61 72 20 72 2c 6e 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6f 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2c 6f 29 7d 65 6c 73 65 20 72 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 70 Data Ascii: lect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function _createSuperInternal(){var r,n=_getPrototypeOf(e);if(t){var o=_getPrototypeOf(this).constructor;r=Reflect.construct(n,arguments,o)}else r=n.apply(this,arguments);return _p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	216.58.206.68	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	687	OUT	GET /recaptcha/api.js?onload=recaptcha_callback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:46:40 GMT Date: Wed, 15 Jan 2025 16:46:40 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:40 UTC	641	IN	Data Raw: 35 64 39 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5d9/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-15 16:46:40 UTC	863	IN	Data Raw: 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 Data Ascii: IlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRy
2025-01-15 16:46:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	169.150.236.105	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	637	OUT	GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://brightmorningteam.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?family=open-sans:400,700 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	992	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:40 GMT Content-Type: font/woff2 Content-Length: 18668 Connection: close Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "6760c6f3-48ec" Last-Modified: Tue, 17 Dec 2024 00:33:55 GMT CDN-StorageServer: NY-346 CDN-FileServer: 831 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:46:04 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 90d43f4ea56b0c3e247993e95737cd2b CDN-Cache: HIT Accept-Ranges: bytes
2025-01-15 16:46:40 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 ec 00 12 00 00 00 00 8b 0c 00 00 48 82 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b 90 0a 1c 86 68 06 60 3f 53 54 41 54 5e 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 18 81 9b 2b 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 84 78 07 89 1f 0c 85 1f 1b b6 7a 27 6f 03 ee 77 3b 80 e3 fa fc 36 11 45 c9 9c 15 a2 08 36 0e 08 86 b4 45 f2 ff ff 27 24 48 19 23 93 a2 d7 02 c2 ab 6e 31 58 0a 91 4a 55 2f af 64 94 4f cd ab bc 4a 43 85 27 4a 22 b4 76 ef 76 89 6c c4 68 fe 11 0d ac d0 75 87 53 bd 07 d8 53 59 cb f6 88 80 10 42 88 68 7a a3 6f 0b 7d 86 12 ff d2 d3 09 57 06 97 de 95 e3 f5 bb 25 6d 36 ee d3 de 41 1a c7 3d ce b6 f4 fb 98 5c 82 86 6d 99 20 0c 5d fb f2 ac 98 7e d4 aa 5b 8f af 0a 9f f3 dc 0d 03 f4 f3 Data Ascii: wOF2HH\|h`?STAT^0\|+26$` xz'ow;6E6E'$H#n1XJU/dOJC'J"vvlhuSSYBhzo}W%m6A=\m ]~[
2025-01-15 16:46:40 UTC	2284	IN	Data Raw: fa c5 47 6c 87 78 5d 54 7b e4 2a 61 82 fd cb c7 ac 8d 2c c3 aa 22 a4 36 26 25 78 59 0e 5a 5a 7e 24 86 2b 77 d3 08 67 30 cd 71 3a 35 ab 06 9b 7e fa 06 51 58 f7 98 bb 5f f3 9e 94 f2 e8 46 fc b4 65 2d bb 9b 63 9c 8b c7 a6 86 aa 3e 86 81 e2 04 fb 86 f0 a8 05 53 6a cc 92 51 80 a6 5f 75 8a 2c 99 37 c2 03 fb 48 69 81 78 18 1e 08 97 d3 ac 80 0c 1a d1 b4 4c 63 fd 6a 36 a0 c0 1a 05 b5 72 24 ee c2 b7 83 37 cf 0e 07 e7 62 12 af 03 bb aa 60 31 e9 64 01 a6 57 31 43 32 f4 df 91 79 14 49 55 52 13 5b 0a 40 10 2b 44 93 44 be 03 36 7d f9 df 25 cc 65 6f 85 27 8e d1 7b 8d a8 0e 95 8d 6a 53 f7 d8 5b d1 e5 22 4f 12 89 b9 4b 07 5a 0d 28 23 d5 e8 ca 20 f2 41 85 21 3e 66 02 2f 66 be 7a 6f d6 ad 73 19 09 f9 11 68 e2 7a 27 8e ab 9b 1b 11 e6 26 cc 70 02 31 87 bf 3c ab d4 3d 3a 41 ed Data Ascii: Glx]T{*a,"6&%xYZZ~$+wg0q:5~QX_Fe-c>SjQ_u,7HixLcj6r$7b`1dW1C2yIUR[@+DD6}%eo'{jS["OKZ(# A!>f/fzoshz'&p1<=:A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	169.150.236.105	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	639	OUT	GET /open-sans/files/open-sans-symbols-700-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://brightmorningteam.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?family=open-sans:400,700 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	992	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:40 GMT Content-Type: font/woff2 Content-Length: 10048 Connection: close Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "6760c734-2740" Last-Modified: Tue, 17 Dec 2024 00:35:00 GMT CDN-StorageServer: NY-346 CDN-FileServer: 839 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:46:33 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: ab0c933f14df981b78026dbaa10f1c7d CDN-Cache: HIT Accept-Ranges: bytes
2025-01-15 16:46:40 UTC	10048	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 27 40 00 12 00 00 00 00 49 84 00 00 26 d8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 1c 1b 1e 1c 82 6a 06 60 3f 53 54 41 54 5a 00 81 04 08 81 7c 09 9f 14 11 10 0a d4 14 c7 26 0b 81 6a 00 01 36 02 24 03 83 3e 04 20 05 84 60 07 85 12 0c 85 1f 1b f0 40 15 ec 98 97 b8 1d a0 50 e4 fe b9 8b a2 5c 90 d2 ec ff 6f c7 0d 19 82 0b 50 5b 3f 89 9d 74 f3 ec 6e d3 fb a2 15 0a 14 8a 6f 2c 5c b7 d0 e8 0e 1a ed 62 34 42 d3 2e 52 5f 3d fe e9 c8 a2 79 e0 47 62 15 21 17 83 1f b9 d0 a1 d8 d5 8d 8b ef 85 cb 16 0d 86 93 32 29 04 a7 30 b5 b9 97 66 d8 07 a3 d3 c5 d5 7c fc 22 fb b4 55 09 2a a5 f2 7f e0 63 b9 38 42 63 9f e4 fa ff af 2b bd ef 7d 10 ce cc 1a 70 49 b6 f2 65 00 d2 d9 59 a6 31 0e 05 80 15 20 05 4b 00 d2 86 a9 Data Ascii: wOF2'@I&j`?STATZ\|&j6$> `@P\oP[?tno,\b4B.R_=yGb!2)0f\|"U*c8Bc+}pIeY1 K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	169.150.236.105	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	639	OUT	GET /open-sans/files/open-sans-symbols-400-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://brightmorningteam.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?family=open-sans:400,700 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	992	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:40 GMT Content-Type: font/woff2 Content-Length: 10180 Connection: close Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "6760c72a-27c4" Last-Modified: Tue, 17 Dec 2024 00:34:50 GMT CDN-StorageServer: NY-427 CDN-FileServer: 839 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:46:04 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: d127e3d30c54058310353f32c97a8144 CDN-Cache: HIT Accept-Ranges: bytes
2025-01-15 16:46:40 UTC	10180	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 27 c4 00 12 00 00 00 00 49 6c 00 00 27 5e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 1c 1b 1e 1c 82 6a 06 60 3f 53 54 41 54 5e 00 81 04 08 81 7c 09 9f 14 11 10 0a d3 60 c7 44 0b 81 6a 00 01 36 02 24 03 83 3e 04 20 05 84 78 07 85 12 0c 85 1f 1b 2a 41 15 ec 98 9d c0 c6 81 01 cd f6 8a 28 82 8d 03 04 69 ac c8 fe ff 7c 20 65 c4 4c 83 97 f2 45 d1 4d a4 77 97 3c 33 a7 d2 96 6d 79 fd 5b 53 13 30 9f dd 5d 77 4a 14 11 10 4a 4c f4 69 b5 8e f6 d0 da a1 b9 ea e7 0a 0b 86 4a c5 63 6f 89 61 31 b5 07 94 c2 42 58 7d f4 e5 4c e9 86 df 6b e6 ef 7d e0 11 3e d8 8b bd d8 2f ee e0 1a 3b 6b 37 0e 61 39 75 ca ff 02 cb fc cc 31 1a 1a 49 4c 82 af fd ca 9e 37 6f f6 5f 00 c0 27 6a d7 05 48 c5 45 5f 2c 00 1a 47 3a 9e d9 a2 Data Ascii: wOF2'Il'^j`?STAT^\|`Dj6$> x*A(i\| eLEMw<3my[S0]wJJLiJcoa1BX}Lk}>/;k7a9u1IL7o_'jHE_,G:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49756	169.150.236.105	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:40 UTC	637	OUT	GET /open-sans/files/open-sans-latin-700-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://brightmorningteam.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?family=open-sans:400,700 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:40 UTC	992	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:40 GMT Content-Type: font/woff2 Content-Length: 18260 Connection: close Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "6760c6fb-4754" Last-Modified: Tue, 17 Dec 2024 00:34:03 GMT CDN-StorageServer: NY-346 CDN-FileServer: 353 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:46:15 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 441ee8bfd0b8babf5e396f3bfcf89b48 CDN-Cache: HIT Accept-Ranges: bytes
2025-01-15 16:46:40 UTC	15392	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 47 54 00 12 00 00 00 00 8a dc 00 00 46 e9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b 8f 42 1c 86 68 06 60 3f 53 54 41 54 5a 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 4c 81 9a 75 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 84 60 07 89 1f 0c 85 1f 1b 1c 7a 17 d0 db f6 08 71 b7 0a 69 85 40 ac a2 28 09 b4 18 45 b0 71 00 20 df 17 ce fe ff 3f 23 b9 21 43 70 05 ea 5a d5 fb 0f 19 82 49 96 38 73 c0 85 9e d5 a2 86 0c 85 ca e4 84 0e 05 95 95 50 53 79 d5 99 c8 ba dc 41 56 66 50 b8 23 41 d7 a0 e1 67 f4 fa 4c dc a2 77 77 1d 5c a4 b1 53 43 cd 3e c9 86 b4 51 7d 83 3a f3 a5 0f bf 79 3f 51 6f b4 46 2f 2d fc 02 0d 4b a1 a0 48 51 4f 93 70 7e e1 0e 4d 0b 27 67 ed f4 e1 d5 e8 7a c9 48 71 7b 58 0e 26 8e e5 2e ae Data Ascii: wOF2GTF\|Bh`?STATZ0\|Lu26$` `zqi@(Eq ?#!CpZI8sPSyAVfP#AgLww\SC>Q}:y?QoF/-KHQOp~M'gzHq{X&.
2025-01-15 16:46:40 UTC	363	IN	Data Raw: e9 30 72 4e b5 9a a8 dc 55 4e d5 35 86 7a 57 c0 25 eb 34 af e3 82 67 83 f2 2d fe cf 04 ef cf 70 5f a1 d4 e8 0c 4e ec 49 3a 1f 0d 10 aa e0 35 0b 4b 24 26 de a8 d5 30 1c 26 89 3f cd f3 08 4b aa 70 8d 9c 1c 62 16 22 23 c3 3c d4 11 fe 1c 13 61 d4 64 17 f5 bb 5d 31 f3 95 4b 53 cc 9e 34 eb 37 9d 1d 84 ed 6d df bb bb bb bc 24 4f 37 37 e5 51 52 2f 50 e7 f6 2e 08 3c cf c4 fd 62 9e bd d7 56 49 9c 32 35 06 a8 e7 00 66 b3 8d 56 b9 83 66 42 1f 82 b7 b9 76 42 13 cf 9b e6 ed 8c 53 57 75 b7 82 8c 1a f0 a1 83 ae 51 3e aa cd d3 54 3b 3a 09 a1 dd 5e c1 63 8c 90 28 1e e5 b7 b3 c8 c6 b5 37 5d d5 7e 80 50 32 d7 8b 9a d9 31 55 9c 8b a1 ef 66 e6 b6 35 fb 1e 36 49 d6 c1 05 0a 5c 65 36 f5 be 69 ee 36 a9 4d f3 5d f3 b3 fa 3e 74 bc fa e3 07 47 ed 4f 67 9c 50 36 48 6d 3d 01 18 9e 10 Data Ascii: 0rNUN5zW%4g-p_NI:5K$&0&?Kpb"#<ad]1KS47m$O77QR/P.<bVI25fVfBvBSWuQ>T;:^c(7]~P21Uf56I\e6i6M]>tGOgP6Hm=
2025-01-15 16:46:40 UTC	2505	IN	Data Raw: 9a e4 03 9d 9f cc 9e f6 ef ab ef 13 7c 96 98 f5 f2 f5 13 30 2c f6 4b 0c 59 30 af cb bd e9 b1 6a a3 3e 41 b6 fa a3 7b 60 e6 7b 49 d5 60 46 93 ad e6 11 72 46 4c ef 2c eb 93 da d3 66 37 82 e3 08 9e 9d 50 01 c8 6f 86 64 0d 06 d4 6e d9 f1 50 52 f3 f3 8c f7 8f a9 1e 3e 76 e6 7b 2c 7a 18 91 f5 e9 40 e7 27 58 a5 df e2 c5 7a b9 8c a2 f1 38 0c 90 56 6f 57 85 e1 8d 79 78 80 16 03 57 f9 7a d1 26 52 72 bb 31 4f b3 d5 f3 1e e2 6a d1 19 a8 a2 8c e3 71 a6 d5 26 66 39 51 75 b7 b7 72 20 ab 11 c2 1e 53 7d 70 0b 88 70 8d 67 e7 e9 d4 83 d5 78 af 42 b2 95 94 ac 37 f3 14 28 4e c0 1d 07 10 72 5d ad fd 62 71 a3 d2 f8 21 80 a1 56 bb a7 3d 6c 9a a8 67 78 30 c2 2e 5e f3 4a 04 87 49 95 2b 65 16 0c 97 97 0f 16 bd 47 19 50 59 0a 79 c8 a2 0b d6 15 40 6b a1 77 cc 30 e1 5e 1c ed 24 ba bd Data Ascii: \|0,KY0j>A{`{I`FrFL,f7PodnPR>v{,z@'Xz8VoWyxWz&Rr1Ojq&f9Qur S}ppgxB7(Nr]bq!V=lgx0.^JI+eGPYy@kw0^$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	104.17.31.174	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:41 UTC	368	OUT	GET /diffuser/diffuser.js HTTP/1.1 Host: diffuser-cdn.app-us1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:41 UTC	678	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:41 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Sep 2024 15:47:53 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=300 etag: W/"234346615b452270c8ee1158258c83bb" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 22faf6fcae096ee97264521770b65762.cloudfront.net (CloudFront) x-amz-cf-pop: ATL59-P4 x-amz-cf-id: 3X5F4wNQyXOuozUuyXygS-zomSQMh8Qwa322gb98nB8WpVm2PA37cg== CF-Cache-Status: HIT Age: 37 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757e3ea2141c6-EWR
2025-01-15 16:46:41 UTC	691	IN	Data Raw: 37 63 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 74 2c 5f 5f 77 65 62 70 61 63 6b Data Ascii: 7cfa!function(e){var t={};function __webpack_require__(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,__webpack_require__),n.l=!0,n.exports}__webpack_require__.m=e,__webpack_require__.c=t,__webpack
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 72 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3d 66 75 6e 63 74 Data Ascii: ;var r=Object.create(null);if(__webpack_require__.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)__webpack_require__.d(r,n,function(t){return e[t]}.bind(null,n));return r},__webpack_require__.n=funct
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 65 3d 3d 3d 6f 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 29 2c 6f 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 6f 2e 63 61 6c 6c 2c 63 3d 6e 26 26 6f 2e 62 69 6e 64 2e 62 69 6e 64 28 69 2c 69 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 Data Ascii: nction(e){return"function"==typeof e\|\|e===o}:function(e){return"function"==typeof e}},function(e,t,r){var n=r(9),o=Function.prototype,i=o.call,c=n&&o.bind.bind(i,i);e.exports=n?c:function(e){return function(){return i.apply(e,arguments)}}},function(e,t,r)
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 72 74 73 3d 6e 26 26 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 33 34 29 2c 6f 3d 72 28 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 21 21 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 79 6d 62 6f 6c 28 29 3b 72 65 74 75 72 6e 21 53 74 72 69 6e 67 28 65 29 7c 7c 21 28 4f 62 6a 65 63 74 28 65 29 69 6e 73 74 61 6e 63 65 6f 66 20 53 79 6d 62 6f 6c 29 7c 7c 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 6e 26 26 6e 3c 34 31 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 Data Ascii: rts=n&&!Symbol.sham&&"symbol"==typeof Symbol.iterator},function(e,t,r){var n=r(34),o=r(3);e.exports=!!Object.getOwnPropertySymbols&&!o((function(){var e=Symbol();return!String(e)\|\|!(Object(e)instanceof Symbol)\|\|!Symbol.sham&&n&&n<41}))},function(e,t,r){va
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 74 29 3b 6e 26 26 6e 2e 77 72 69 74 61 62 6c 65 26 26 28 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 2c 72 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 22 65 6e 75 6d 65 72 61 62 6c 65 22 69 6e 20 72 3f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3a 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 72 29 7d 3a 75 3a 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 72 29 7b 69 66 28 63 28 65 29 2c 74 3d 61 28 74 29 2c 63 28 72 29 2c 6f 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 72 Data Ascii: t);n&&n.writable&&(e[t]=r.value,r={configurable:"configurable"in r?r.configurable:n.configurable,enumerable:"enumerable"in r?r.enumerable:n.enumerable,writable:!1})}return u(e,t,r)}:u:function defineProperty(e,t,r){if(c(e),t=a(t),c(r),o)try{return u(e,t,r
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 73 2c 65 2c 74 29 2c 21 6f 28 72 29 7c 7c 69 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 75 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6e 75 6d 62 65 72 22 29 2c 61 28 65 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 30 29 2c 63 3d 72 28 33 35 29 2c 61 3d 69 2e 70 72 6f 63 65 73 73 2c 73 3d 69 2e 44 65 6e 6f 2c 75 3d 61 26 26 61 2e 76 65 72 73 69 6f 6e 73 7c 7c Data Ascii: s,e,t),!o(r)\|\|i(r))return r;throw u("Can't convert object to primitive value")}return void 0===t&&(t="number"),a(e,t)}},function(e,t,r){var n=r(5);e.exports=n({}.isPrototypeOf)},function(e,t,r){var n,o,i=r(0),c=r(35),a=i.process,s=i.Deno,u=a&&a.versions\|\|
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 34 32 29 2c 6f 3d 72 28 34 33 29 3b 28 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7c 7c 28 6f 5b 65 5d 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 7b 7d 29 7d 29 28 22 76 65 72 73 69 6f 6e 73 22 2c 5b 5d 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 32 36 2e 31 22 2c 6d 6f 64 65 3a 6e 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 32 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 Data Ascii: tion(e,t,r){var n=r(42),o=r(43);(e.exports=function(e,t){return o[e]\|\|(o[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.26.1",mode:n?"pure":"global",copyright:" 2014-2022 Denis Pushkarev (zloirock.ru)",license:"https://github.com/zloirock/core-js
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 78 70 28 22 5b 5c 5c 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 23 5d 2a 29 22 29 2e 65 78 65 63 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 3f 22 22 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 2c 67 65 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 56 67 6f 50 61 72 61 6d 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 2c 67 65 74 50 61 74 68 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 74 68 6e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d Data Ascii: xp("[\\?&]"+e+"=([^&#]*)").exec(window.location.search);return null===t?"":decodeURIComponent(t[1].replace(/\+/g," "))},getLocation:function getLocation(){return this.removeVgoParam(window.location.href)},getPathname:function getPathname(){return this.rem
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 69 2e 61 5b 65 5d 2e 64 6f 6d 61 69 6e 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 6e 65 63 74 28 29 7b 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 28 29 7b 7d 7d 5d 29 2c 53 65 72 76 69 63 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: .name.toLowerCase();return i.a[e].domain}},{key:"connect",value:function connect(){}},{key:"update",value:function update(){}}]),Service}();function _typeof(e){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return t
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 53 75 70 65 72 49 6e 74 65 72 6e 61 6c 28 29 7b 76 61 72 20 72 2c 6e 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6f 3d 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2c 6f 29 7d 65 6c 73 65 20 72 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 70 Data Ascii: lect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function _createSuperInternal(){var r,n=_getPrototypeOf(e);if(t){var o=_getPrototypeOf(this).constructor;r=Reflect.construct(n,arguments,o)}else r=n.apply(this,arguments);return _p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49762	104.17.31.174	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:41 UTC	876	OUT	GET /?a=1002421028&u=https%3A%2F%2Fbrightmorningteam.activehosted.com%2Ff%2F158%3Fs%3Dc7bc722fa31ed07a45768c9be8733ff5%26nl%3D1%26c%3D1728%26m%3D9908%26utm_source%3DActiveCampaign%26utm_medium%3Demail%26utm_content%3DNeuroscience%2520tips%2520for%2520better%2520team%2520leadership%26utm_campaign%3DM%252C%25201%252F13%252F25%2520-%2520Newsletter HTTP/1.1 Host: prism.app-us1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:41 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:41 GMT Content-Type: application/javascript Content-Length: 0 Connection: close Cache-Control: no-cache, private Set-Cookie: prism_1002421028=665e1bfa-4f19-41c8-beed-eee1a7a78791; expires=Fri, 14 Feb 2025 16:46:41 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none x-powered-by: PHP/8.1.29 x-envoy-upstream-service-time: 62 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757e3e9e38c11-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	104.18.128.216	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:41 UTC	400	OUT	GET /ZzEmW/2024/11/07/0ec39b53-b720-4ff5-9d4e-80ae5d2b0133.png HTTP/1.1 Host: content.app-us1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:41 UTC	565	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:41 GMT Content-Type: image/png Content-Length: 1090816 Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1833813 etag: "ae75a3120de31de40002577de07f7347" last-modified: Thu, 07 Nov 2024 02:35:34 GMT x-envoy-upstream-service-time: 116 CF-Cache-Status: HIT Age: 191810 Expires: Thu, 15 Jan 2026 16:46:41 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757e3efae438c-EWR
2025-01-15 16:46:41 UTC	804	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 04 ec 08 02 00 00 00 6d aa 70 72 00 10 a4 c7 49 44 41 54 78 da ec dd 5b 6e 14 6b 12 45 e1 3f 4b cc 7f 58 07 8e e9 81 70 e9 21 34 64 d7 05 03 32 be 60 29 b6 14 e1 fc 4a e1 e5 55 eb 61 4f 20 95 f6 fa f8 f5 fb 7f fe bb df ee e3 95 b7 d3 f5 23 f4 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 7f be af f3 8f 73 ce 39 e7 9c 73 ce 39 e7 9c 73 ce 39 e7 9c 7b e6 4e fb be ce 9f fd fa 8b f3 e3 79 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 fe b7 be 6e 6f ac 20 22 22 22 22 22 22 22 22 22 22 22 e2 53 7c b7 ef fb b6 6d 88 88 88 88 88 88 88 88 88 88 88 88 f8 14 4f eb 62 6b bb Data Ascii: PNGIHDRpmprIDATx[nkE?KXp!4d2`)JUaO #we]sus-z[={nYs9s9s9{NySv)^]\|q>k8kO5no """""""""""S\|mObk
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 90 f3 c3 79 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 fe d7 be fe bd 1a 22 22 22 22 22 22 22 22 22 22 22 22 3e c5 75 f7 e5 6a f7 bc bb 77 5d 3f 54 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 f5 47 fb 69 5f fb f6 eb 4f 81 ed eb de 75 fd ed f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 7f a9 af 7f 7f 7b d2 c2 f9 d1 bc 76 8d f3 29 5e bb c6 f9 14 af 5d e3 7c 8a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 ce a7 78 ed 1a ff 7b 3f ad 1f 4f b4 f6 33 39 3f 9a d7 ae 71 3e c5 6b d7 38 9f e2 b5 6b 9c 4f f1 da 35 ce a7 78 ed 1a e7 53 bc 76 8d f3 29 5e bb c6 Data Ascii: ySv)^]\|q>k8kO5"""""""""""">ujw]?T-z[={nY;we]sGi_Ouwe]sus-z[={nY{v)^]\|q>k8kO5x{?O39?q>k8kO5xSv)^
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 bf d1 c7 db 0f 47 43 44 44 44 44 44 44 44 44 44 44 44 c4 4b 1c db a3 ca d9 36 d9 f8 e8 ba fe f2 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac df ea e3 d7 93 21 22 22 22 22 22 22 22 22 22 22 22 e2 25 1e 96 65 19 eb ba 8c 0d eb 83 2f 9b eb fa 8b ef b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 7e b3 df d5 fe 8f 7b 44 44 44 44 44 44 44 44 44 44 44 c4 97 c7 e3 9f fc da ee ed 87 7f 37 3e f8 91 ba be 87 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 5d ef dc 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb d7 fb d3 ff 50 d9 7e c7 f9 be bc 76 8d Data Ascii: us-z[={nYGCDDDDDDDDDDDK6{nY;we]sus-z[=!"""""""""""%e/e]sus-z[={nY;~{DDDDDDDDDDD7>[={nY;we]sus-P~v
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 7c 16 af 5d e3 cf f1 bb 75 5d 97 65 41 44 44 44 44 44 44 44 44 44 44 44 c4 4b 7c fa 84 ca ab 8d 9b 3f 50 d7 77 d2 73 cb ba de b9 e7 96 75 bd 73 cf 2d eb 7a e7 9e 5b d6 f5 ce 3d b7 ac eb 9d 7b 6e 59 d7 3b f7 dc b2 ae 77 ee b9 65 fd 4a 1f af de fd bd 19 22 22 22 22 22 22 22 22 6e fc f9 b7 df bf f9 fe 87 af be fe f6 bb 1f 7f fa e5 8f bf 0a 97 11 11 11 71 6a 6e 0f 2a 9f 6c 13 ce 77 e6 b5 6b 9c cf e2 b5 6b 9c ff c7 be dd 84 44 11 c6 61 00 7f 67 70 45 a5 10 24 89 48 13 16 26 12 24 89 22 d0 2e 51 5d 22 10 82 82 88 0e 81 05 15 74 28 2a 4f 1d 0a 3a 29 05 15 44 d2 21 48 21 a1 0f 16 13 b4 b0 14 3b b4 6d 59 2e b1 22 89 6b db ae 19 44 ec ce c7 ee cc bc ef cc 36 ae 7a 08 3f f0 f0 8e ee b8 cf 9f e5 c7 c3 c3 f0 7f 5f f6 Data Ascii: ]\|]\|]\|]\|]u]eADDDDDDDDDDDK\|?Pwsus-z[={nY;weJ""""""""nqjnlwkkDagpE$H&$".Q]"t(O:)D!H!;mY."kD6z?_
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 8f 0a 0a 21 0d 10 a7 54 f1 ed 47 b7 7e 49 ed 37 56 d6 36 a4 16 d2 55 1e ee 75 85 fa b9 45 a5 83 47 8e 79 74 45 43 2b b0 55 d8 cf 4a 59 76 f8 cb bf 31 76 a8 70 70 24 83 42 7c 7a 96 a0 27 f5 ac ff e8 0f d3 a0 30 64 54 80 88 79 c0 9e 0f 5f 0b fe e6 83 27 49 26 1c 9c 5c 8e 7e 75 4b 50 3f 58 f9 f0 e1 63 e5 c3 87 8f 95 af cf 3e 3d 3e 63 01 83 c1 60 b0 c1 f1 30 bf 40 d2 57 78 f5 19 58 f0 e1 09 be e3 05 83 c1 82 58 c3 d3 d9 38 65 26 df 7e 74 cb f1 e9 59 d4 1a c2 7e 3a 9f 63 45 71 5c 79 ad 31 a7 70 9f 57 df 81 a4 0b b4 ef d4 75 63 71 25 4b 9f 93 22 67 93 41 21 34 3a 81 ef 93 7a 21 67 14 ec 20 83 82 47 4f 6f be 33 00 06 6b 8d 47 4f 9a 4a f2 31 ff ad 77 38 f6 00 06 83 c1 60 30 d8 50 98 aa 1b 9a 9a 55 93 24 a0 a1 8d 4b f3 cd 06 0d ad 75 7d f8 cb 9b 93 66 cc 36 35 35 Data Ascii: !TG~I7V6UuEGytEC+UJYv1vpp$B\|z'0dTy_'I&\~uKP?Xc>=>c`0@WxXX8e&~tY~:cEq\y1pWucq%K"gA!4:z!g GOo3kGOJ1w8`0PU$Ku}f655
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 5f 8f 1c 17 4c 6c 70 72 75 e3 3b 5e ec f9 46 e8 ef ac 68 71 2b ee d0 b5 bb b8 ba 8f f5 d4 d8 64 62 80 85 a5 65 de 9e 23 1c eb f2 f7 c5 65 86 0f 5f 9f 7d 71 99 e1 c3 d7 67 5f 5c 66 f8 2d fb b8 a1 82 40 20 10 2f 4f c8 7a 6f 9d 87 97 4f 9b 0b 6d 3f 76 d6 d3 bb 0f c9 47 4c ea 0a 8e e3 45 20 10 e2 62 f4 a4 a9 f4 04 46 70 43 25 f8 8d 78 92 8f 82 03 c7 39 f6 d0 b6 28 fe fd d5 ae 3d 7a 11 33 a4 dd fb 83 53 17 34 af 1b 9b a6 22 66 8c 9f 36 53 56 f2 c5 ab 37 12 33 7c c7 04 31 e4 64 ba 7f 33 26 38 9c 18 30 26 58 37 37 54 76 55 d4 10 33 2c ad ac 78 d5 95 ae a8 b2 1c 37 3a ba b4 e3 38 58 84 71 46 6a ce 06 1d 2e b0 ca 6b 8d 01 21 11 a4 16 66 e6 e6 39 85 fb 38 16 45 20 10 08 04 02 61 70 41 55 f5 f7 1f 9f b1 48 0c 0d 6d 7c 9a 6f 36 68 68 1d eb bc dd 65 c4 0c 0f 2f 6f 4d Data Ascii: _Llpru;^Fhq+dbe#e_}qg_\f-@ /OzoOm?vGLE bFpC%x9(=z3S4"f6SV73\|1d3&80&X77TvU3,x7:8XqFj.k!f98E apAUHm\|o6hhe/oM
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 31 9d ab 6f f4 e6 fa 54 ac 64 99 33 b2 36 d7 35 b5 90 bd 0c b7 5b ae be ae 93 84 94 bc 81 a7 eb 1a ec 86 54 02 fe 69 a5 cf 33 42 ae 59 2c 2c c6 be cb 5c 56 7d 32 c7 57 40 36 0a 4c 4f f1 ee 17 67 7e f2 e4 41 d3 7c de fb c8 f9 2f 3d c1 72 75 95 91 23 8f e5 5c 5d 65 e4 c8 63 39 57 57 19 f9 9a b9 1e 5a a4 c5 2b ad 30 11 72 e4 89 9f ab ab 8c 1c f9 7a e5 72 13 2a 3c 2b 49 71 bb b7 e5 e4 91 8c 7e fd 18 53 f5 04 90 23 c7 99 cf 94 1b 46 0a 09 4a 23 c6 be 0e e7 5d b7 5a 29 6a f5 3e b8 b7 30 3f af 74 9d e1 79 5b 73 c3 d7 d1 8f 24 a6 1d 85 45 55 67 ce 2b 5a 49 78 5e 5a 51 7d e0 68 25 d9 28 3d 73 93 54 7d b2 ae 12 52 f2 06 7a 73 f3 4b cb ab 6c 7e a8 fc 56 fd 3c ed 72 29 31 f6 5d 66 97 cb 55 53 7b 81 6c 14 f0 fb 79 f7 8b 33 3f 79 f2 de ee ce 9f e3 df 9c ff d2 13 2d 57 Data Ascii: 1oTd365[Ti3BY,,\V}2W@6LOg~A\|/=ru#\]ec9WWZ+0rzr*<+Iq~S#FJ#]Z)j>0?ty[s$EUg+ZIx^ZQ}h%(=sT}RzsKl~V<r)1]fUS{ly3?y-W
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 04 6f 7a 60 cf 41 78 e5 f1 2c ea b6 6c df b4 53 ef 36 bd 87 74 19 32 0e 2f 17 8e 5e 3b 4f df 91 6d d7 d0 e6 6e c7 d0 86 36 2b df af 68 fa 83 fa 2a e5 19 a4 d6 86 6f f8 99 9f af 4f b2 e1 1b be 8f f8 aa 0a 15 a9 9e 94 2a 5f 89 d8 c0 f7 b0 be 19 d8 70 e4 3c ae 5d 5e 2e 5b 1e 97 9b e4 0d 4f e6 c8 89 6b b8 3e e3 82 23 8f 5d b2 d0 ee 9e 73 5f 4f 5b bd 0d e1 74 06 4c 9a 17 34 69 5e fa 7a f2 3c 26 7f f4 82 b5 a1 fb 92 54 c7 1b f9 c1 a5 89 cb 37 0d 9e b6 48 b5 5d 7c 8d 4f 5c ba 31 3c f1 9c c8 fc 43 37 36 64 fa e2 6a 8d 5a e2 b1 12 0f 39 9f ca 53 a9 76 c3 3e 63 67 62 b9 ea 7e 23 9c 39 e1 09 e7 70 3d 97 27 5f 7e 4a 83 e6 5d fa 79 96 10 77 f5 ee 98 45 61 d5 1a b6 c4 bd 30 79 c4 df 1e 7b ec ad 3a 8d c6 2f 8e 38 70 e9 3b ed 23 72 cf c7 15 70 87 a0 51 c5 4b 96 21 06 f2 Data Ascii: oz`Ax,lS6t2/^;Omn6+hoO_p<]^.[Ok>#]s_O[tL4i^z<&T7H]\|O\1<C76djZ9Sv>cgb~#9p='_~J]ywEa0y{:/8p;#rpQK!
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: af 57 a9 55 ec 95 d2 79 9e 79 d6 f9 e2 1b 27 96 64 ed f2 7f 38 a7 3b 68 7a e0 e8 5c ba 42 65 af 0f 1a 8e 77 b2 cf 0b 34 82 d1 c1 cb aa a0 fc 11 6b 14 1c 2c 64 7b 8b a7 09 1d 3f fc 51 38 47 2c 44 99 73 92 23 f0 e6 16 2e fe f2 f2 e8 63 b2 e3 4a 4b c3 4b 35 59 4b 24 06 7c 3b f4 1a 35 2d c3 76 80 ac 46 cb 4a 33 b4 a1 1f 16 5a 56 9a a1 95 68 c2 1f a6 98 62 8a 29 a6 64 8e 62 c1 43 c5 7e c1 f5 3a b1 01 9b 32 47 04 64 91 82 1b b7 12 65 5e 27 51 e0 53 1c e6 72 0e 13 75 77 e5 e0 e7 df 67 7b fc 09 12 05 3e dd 1d 96 6b 5e 0b 4c 44 49 08 cb f7 1c 53 9a 70 58 e6 e2 c2 82 f4 20 f7 d3 cf 20 ac 96 23 c3 8a e5 82 d5 85 28 2e b0 5b 84 8d b3 92 d2 6b cb c9 6b e9 1e 71 95 fa cd 48 02 01 01 01 48 e4 23 f8 9a 3b 17 5c 55 54 ac 51 9f 7c 07 dc 6a 09 0e 27 03 0a 96 19 36 40 97 79 Data Ascii: WUyy'd8;hz\Bew4k,d{?Q8G,Ds#.cJKK5YK$\|;5-vFJ3ZVhb)dbC~:2Gde^'QSruwg{>k^LDISpX #(.[kkqHH#;\UTQ\|j'6@y
2025-01-15 16:46:41 UTC	1369	IN	Data Raw: 43 70 86 11 48 ed 95 72 15 89 07 9c 00 61 57 11 34 79 c1 d4 55 5b 71 40 9a 1c ba b9 f7 98 99 55 1b b4 b0 a0 f1 c2 2f 11 a7 9f 91 1f f8 52 a1 d2 6d f8 a4 74 fd 59 13 fb 31 d9 03 fc 96 ec 3f bb 55 07 3f cc ad 76 c4 1a 33 74 e6 d2 e0 f0 68 e4 2f 19 bf 64 83 e5 23 56 c8 f6 c3 fc de f2 de 5c ef 1e 2a 3b 4f 6b 3e 62 ed 48 b4 f9 44 70 76 65 7a e1 14 7e f1 e5 fa 81 9d de e9 3b bc eb b0 89 c8 36 5f f6 cd aa aa 4e 6c f8 99 16 df 63 b3 3c 2d 2b cd d0 86 7e 58 68 59 69 86 56 a0 e9 48 ea 33 40 49 a5 0d df f0 b3 02 5f 9f 64 c3 37 7c 9f f0 37 28 7a a8 d8 6c b1 55 f7 20 62 03 e6 81 f6 47 8a 2f 4f 8e 1b 3e be 39 91 e4 d6 9d 1c 04 e4 19 3c 3d 24 ef 33 05 88 01 44 9d 46 74 02 cf fd 5c 9f f0 89 b5 ac f8 55 1b b6 b0 f9 c4 57 c7 9c 42 e4 77 62 03 c9 60 11 ed 81 2f 1f 51 e3 91 Data Ascii: CpHraW4yU[q@U/RmtY1?U?v3th/d#V\*;Ok>bHDpvez~;6_Nlc<-+~XhYiVH3@I_d7\|7(zlU bG/O>9<=$3DFt\UWBwb`/Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49764	142.250.185.68	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:41 UTC	493	OUT	GET /recaptcha/api.js?onload=recaptcha_callback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:41 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:46:41 GMT Date: Wed, 15 Jan 2025 16:46:41 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:41 UTC	641	IN	Data Raw: 35 64 39 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5d9/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-15 16:46:41 UTC	863	IN	Data Raw: 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 Data Ascii: IlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRy
2025-01-15 16:46:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	104.18.128.216	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:41 UTC	745	OUT	GET /?a=1002421028&u=https%3A%2F%2Fbrightmorningteam.activehosted.com%2Ff%2F158%3Fs%3Dc7bc722fa31ed07a45768c9be8733ff5%26nl%3D1%26c%3D1728%26m%3D9908%26utm_source%3DActiveCampaign%26utm_medium%3Demail%26utm_content%3DNeuroscience%2520tips%2520for%2520better%2520team%2520leadership%26utm_campaign%3DM%252C%25201%252F13%252F25%2520-%2520Newsletter HTTP/1.1 Host: prism.app-us1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prism_1002421028=665e1bfa-4f19-41c8-beed-eee1a7a78791
2025-01-15 16:46:42 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:46:42 GMT Content-Type: application/javascript Content-Length: 0 Connection: close Cache-Control: no-cache, private Set-Cookie: prism_1002421028=665e1bfa-4f19-41c8-beed-eee1a7a78791; expires=Fri, 14 Feb 2025 16:46:42 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none x-powered-by: PHP/8.1.29 x-envoy-upstream-service-time: 85 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Server: cloudflare CF-RAY: 902757e85ab5c45c-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	172.217.18.4	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:42 UTC	1010	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfz HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:43 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 16:46:43 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-eGeD8ayRjJ6PFM4mUYWkxg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:43 UTC	229	IN	Data Raw: 35 37 61 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 57a9<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 65 47 65 44 38 61 79 52 6a 4a 36 50 46 4d 34 6d 55 59 57 6b 78 67 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 34 56 64 76 32 43 68 6f 6c 4b 6e 45 61 5f 5f 50 43 50 65 41 79 46 45 2d 79 6f 4a 6b 63 55 79 67 32 38 5f 75 65 36 74 Data Ascii: 3uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="eGeD8ayRjJ6PFM4mUYWkxg"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA4Vdv2CholKnEa__PCPeAyFE-yoJkcUyg28_ue6t
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 45 6d 57 62 79 49 4d 5f 48 74 5f 38 63 45 35 62 6a 4d 42 48 57 36 62 39 42 65 6d 5a 48 33 78 4a 71 52 65 72 58 75 42 6e 66 41 39 6b 59 50 56 49 68 7a 39 47 6e 47 6a 61 65 4e 78 6b 34 39 43 6d 4b 48 72 4d 4c 76 45 67 36 49 48 42 2d 57 6f 33 31 72 5a 4f 4d 48 4f 64 68 79 69 69 64 66 36 7a 73 36 59 68 32 64 57 73 70 59 4c 6c 65 65 34 58 50 30 61 50 74 66 66 78 6a 50 35 54 6d 50 74 65 69 31 2d 75 7a 6b 45 49 2d 7a 75 66 55 74 46 50 5f 6f 61 43 77 51 71 6f 6a 58 42 51 6d 7a 6f 4d 45 32 67 56 37 6b 58 31 53 54 79 63 69 67 43 4a 4f 67 61 69 6b 70 54 62 32 67 30 7a 4e 58 6e 61 73 6f 63 43 5f 70 5a 48 63 42 75 37 6a 67 70 59 35 79 30 55 70 73 70 70 30 2d 4b 38 6f 4f 66 64 54 4f 71 4e 5a 62 39 55 6b 70 36 67 61 63 4a 6e 65 45 46 78 51 57 67 77 33 58 73 65 58 6c 66 Data Ascii: EmWbyIM_Ht_8cE5bjMBHW6b9BemZH3xJqRerXuBnfA9kYPVIhz9GnGjaeNxk49CmKHrMLvEg6IHB-Wo31rZOMHOdhyiidf6zs6Yh2dWspYLlee4XP0aPtffxjP5TmPtei1-uzkEI-zufUtFP_oaCwQqojXBQmzoME2gV7kX1STycigCJOgaikpTb2g0zNXnasocC_pZHcBu7jgpY5y0Upspp0-K8oOfdTOqNZb9Ukp6gacJneEFxQWgw3XseXlf
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 31 55 64 45 56 47 54 45 4e 4f 56 54 6b 33 55 7a 64 55 52 57 6c 35 4e 58 4d 31 52 48 52 72 65 54 64 78 59 32 46 44 63 7a 52 4e 61 33 70 4e 5a 33 64 4a 53 30 35 55 51 7a 63 77 52 56 52 6a 56 33 56 6f 64 54 52 44 53 32 45 76 4f 47 68 50 52 6c 64 48 55 30 34 31 57 6b 74 7a 51 6d 6c 30 55 32 52 6c 52 58 5a 48 62 44 4e 75 56 32 56 77 56 45 4a 58 4e 46 56 43 51 33 4e 79 4c 7a 5a 32 52 31 51 33 4f 57 64 42 61 6d 38 76 55 7a 64 56 59 31 52 6e 57 6b 74 69 63 55 30 79 61 79 73 31 54 46 6f 35 54 6c 5a 7a 4e 30 74 4d 65 6a 6c 30 55 6a 4e 51 63 6b 31 34 4c 7a 4e 43 64 6e 67 7a 54 6e 70 47 57 45 6b 76 53 6e 5a 6f 54 46 6b 78 56 7a 6c 36 64 46 4e 49 57 6b 35 4a 55 31 68 6c 54 7a 64 76 51 6e 49 76 59 69 74 32 64 30 70 6b 51 6a 6b 30 61 56 6c 45 52 6e 68 79 62 47 46 53 61 Data Ascii: 1UdEVGTENOVTk3UzdURWl5NXM1RHRreTdxY2FDczRNa3pNZ3dJS05UQzcwRVRjV3VodTRDS2EvOGhPRldHU041WktzQml0U2RlRXZHbDNuV2VwVEJXNFVCQ3NyLzZ2R1Q3OWdBam8vUzdVY1RnWkticU0yays1TFo5TlZzN0tMejl0UjNQck14LzNCdngzTnpGWEkvSnZoTFkxVzl6dFNIWk5JU1hlTzdvQnIvYit2d0pkQjk0aVlERnhybGFSa
2025-01-15 16:46:43 UTC	1390	IN	Data Raw: 61 54 56 51 51 54 42 77 59 55 39 51 61 32 35 32 63 45 34 76 54 56 46 46 59 6e 56 71 4e 55 68 4c 4e 47 31 4a 65 6a 46 4e 52 58 4e 6e 4d 56 56 4e 63 6a 64 77 64 57 35 56 53 30 78 50 54 6a 4a 70 4e 33 4a 75 56 6b 46 48 63 45 68 56 5a 44 68 53 56 48 42 76 59 56 68 45 55 54 52 57 53 54 4d 72 5a 6c 55 7a 64 47 4e 6b 63 46 6c 74 56 6d 52 73 4e 6c 64 4b 57 6b 35 6b 55 46 67 77 65 47 34 30 54 33 52 34 59 6e 46 6e 53 55 56 4f 61 6b 56 31 5a 31 6c 33 62 33 6c 7a 54 47 64 30 56 6e 6b 33 62 44 46 58 53 58 41 30 55 6d 5a 61 63 7a 52 44 65 48 68 45 63 6c 46 32 59 31 52 36 4d 58 63 77 59 54 52 47 53 32 31 59 52 57 70 56 4f 46 52 47 4e 47 46 57 51 6e 6c 55 62 6a 51 34 61 57 56 42 61 32 68 78 64 6a 52 56 61 30 31 57 56 30 56 4d 55 31 52 57 55 6a 68 36 4e 46 70 34 51 55 78 Data Ascii: aTVQQTBwYU9Qa252cE4vTVFFYnVqNUhLNG1JejFNRXNnMVVNcjdwdW5VS0xPTjJpN3JuVkFHcEhVZDhSVHBvYVhEUTRWSTMrZlUzdGNkcFltVmRsNldKWk5kUFgweG40T3R4YnFnSUVOakV1Z1l3b3lzTGd0Vnk3bDFXSXA0UmZaczRDeHhEclF2Y1R6MXcwYTRGS21YRWpVOFRGNGFWQnlUbjQ4aWVBa2hxdjRVa01WV0VMU1RWUjh6NFp4QUx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49774	172.217.18.4	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:45 UTC	872	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:45 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 16:46:45 GMT Date: Wed, 15 Jan 2025 16:46:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:45 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2025-01-15 16:46:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49775	172.217.18.4	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:45 UTC	860	OUT	GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go&co=aHR0cHM6Ly9icmlnaHRtb3JuaW5ndGVhbS5hY3RpdmVob3N0ZWQuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&cb=z1bw6zgaogfz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:45 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18936 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 10:53:32 GMT Expires: Thu, 15 Jan 2026 10:53:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Dec 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 21193 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:46:45 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 5a 29 7b 69 66 28 5a 3d 28 56 3d 6e 75 6c 6c 2c 4b 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 5a 7c 7c 21 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 56 3b 74 72 79 7b 56 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 59 7d 29 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 29 7b 72 65 74 75 72 6e 28 53 3d 28 59 3d 5b 2d 34 39 2c 37 36 2c 37 31 2c 2d 34 2c 36 32 2c 2d 32 30 2c 59 2c 2d 31 35 2c 36 35 2c 2d 34 30 5d 2c 50 3d 28 49 3d 56 70 2c 6c 26 37 29 2c 43 29 5b 56 2e 4c 5d 28 56 2e 6e 53 29 2c 53 29 5b 56 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 50 2b 3d 36 2b 28 51 3d 57 2c 37 29 2a 6c 2c 50 26 3d 37 7d 2c 53 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 28 28 51 3d 28 57 3d 28 57 3d 2b 28 57 3d 5a 25 31 36 2b 31 2c 59 29 5b 50 2b 37 35 26 37 5d 2a 5a 2a 57 2d 31 36 30 2a Data Ascii: License-Identifier: Apache-2.0','/','var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160*
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 6c 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 56 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 Data Ascii: lice"))return"array";if(l=="[object Function]"\|\|typeof Z.call!="undefined"&&typeof Z.propertyIsEnumerable!="undefined"&&!Z.propertyIsEnumerable("call"))return"function"}else return"null";else if(V=="function"&&typeof Z.call=="undefined")return"object";ret
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 38 7c 32 34 30 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 7c 32 32 34 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 36 26 36 33 7c 31 32 38 29 2c 59 5b 50 2b 2b 5d 3d 56 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 59 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 29 7b 69 66 28 56 3d 56 2e 4b 5b 5a 5d 2c 56 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 5b 58 2c 33 30 2c 5a 5d 3b 69 66 28 56 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 5a 2a 34 2a 5a 2b 37 36 2a 5a 2b 35 33 29 2c 56 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 57 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 29 7b 66 6f 72 28 59 3d Data Ascii: Y[P++]=V>>18\|240,Y[P++]=V>>12&63\|128):Y[P++]=V>>12\|224,Y[P++]=V>>6&63\|128),Y[P++]=V&63\|128);return Y},g=function(Z,V){if(V=V.K[Z],V===void 0)throw[X,30,Z];if(V.value)return V.create();return V.create(Z4Z+76*Z+53),V.prototype},Wq=function(Z,V,l,Y){for(Y=
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 51 3d 67 28 34 38 32 2c 6c 29 29 26 26 51 5b 51 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 49 7c 7c 66 28 6c 2c 34 38 32 2c 5b 49 26 32 35 35 5d 29 29 3a 66 28 6c 2c 32 38 34 2c 5b 39 35 5d 29 2c 66 28 6c 2c 33 37 2c 75 28 5a 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 5a 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6c 2e 73 3d 56 7d 7d 7d 2c 42 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 2c 57 2c 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 69 66 28 7a 3d 67 28 31 33 30 2c 6c 29 2c 7a 3e 3d 6c 2e 49 29 74 68 72 6f 77 5b 58 2c 33 31 5d 3b 66 6f 72 28 4b 3d 28 49 3d 28 51 3d 28 59 3d 30 2c 5a 29 2c 7a 29 2c 6c 2e 6d 64 2e 6c Data Ascii: ength-1]\|\|95,(Q=g(482,l))&&Q[Q.length-1]==I\|\|f(l,482,[I&255])):f(l,284,[95]),f(l,37,u(Z.length,2).concat(Z),9)}finally{l.s=V}}},Bq=function(Z){return Z},c=function(Z,V,l,Y,P,S,Q,I,W,K,z,x,T,L){if(z=g(130,l),z>=l.I)throw[X,31];for(K=(I=(Q=(Y=0,Z),z),l.md.l
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 2e 50 3d 28 56 2e 73 72 3d 30 2c 30 29 2c 5b 5d 29 2c 76 6f 69 64 20 30 29 2c 56 2e 4f 72 3d 21 28 56 2e 49 3d 30 2c 56 2e 4b 3d 5b 5d 2c 56 2e 54 3d 21 28 28 56 2e 56 55 3d 5b 5d 2c 56 29 2e 52 3d 76 6f 69 64 20 30 2c 56 2e 57 32 3d 66 61 6c 73 65 2c 56 2e 4c 53 3d 32 35 2c 56 2e 70 53 3d 50 2c 56 2e 72 6e 3d 28 56 2e 69 3d 76 6f 69 64 20 30 2c 30 29 2c 56 2e 4e 3d 5b 5d 2c 31 29 2c 31 29 2c 56 2e 41 3d 31 2c 56 29 2e 48 32 3d 28 56 2e 6a 49 3d 28 28 56 2e 47 3d 30 2c 56 29 2e 53 3d 5b 5d 2c 5b 5d 29 2c 6c 29 2c 76 6f 69 64 20 30 29 2c 56 2e 67 3d 30 2c 56 29 2e 57 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 6c 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 6c 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 Data Ascii: .P=(V.sr=0,0),[]),void 0),V.Or=!(V.I=0,V.K=[],V.T=!((V.VU=[],V).R=void 0,V.W2=false,V.LS=25,V.pS=P,V.rn=(V.i=void 0,0),V.N=[],1),1),V.A=1,V).H2=(V.jI=((V.G=0,V).S=[],[]),l),void 0),V.g=0,V).W=void 0,window.performance\|\|{}),l.timeOrigin)\|\|(l.timing\|\|{}).na
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 28 31 38 2c 4b 2c 5b 7a 2c 54 2c 78 5d 29 29 7d 2c 28 55 28 33 37 36 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 29 7b 28 78 3d 28 7a 3d 28 78 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 67 28 7a 2c 4b 29 29 21 3d 30 2c 67 28 78 2c 4b 29 29 2c 7a 29 26 26 55 28 31 33 30 2c 4b 2c 78 29 7d 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 28 4c 3d 28 78 3d 28 54 3d 28 78 3d 28 4c 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 4f 28 4b 29 29 2c 54 3d 4f 28 4b 29 2c 67 28 54 2c 4b 29 29 2c 67 28 78 2c 4b 29 29 2c 67 28 4c 2c 4b 29 29 2c 55 29 28 7a 2c 4b 2c 47 73 28 78 2c 4c 2c 54 2c 4b 29 29 7d 2c 28 55 28 31 38 2c 56 2c 28 55 28 33 34 38 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 66 6f 72 28 78 3d Data Ascii: (18,K,[z,T,x]))},(U(376,(y(function(K,z,x){(x=(z=(x=O((z=O(K),K)),g(z,K))!=0,g(x,K)),z)&&U(130,K,x)},(y(function(K,z,x,T,L){(L=(x=(T=(x=(L=O((z=O(K),K)),O(K)),T=O(K),g(T,K)),g(x,K)),g(L,K)),U)(z,K,Gs(x,L,T,K))},(U(18,V,(U(348,(y(function(K,z,x,T,L){for(x=
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 2c 56 2c 28 28 56 2e 6b 75 79 64 71 73 3d 28 56 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 56 2e 62 67 6f 64 6e 64 3d 30 2c 56 2e 63 70 6e 71 6a 6e 3d 22 22 2c 5b 5d 29 2c 56 29 2e 76 26 26 56 2e 76 2e 61 26 26 28 28 5a 3d 56 2e 76 2e 62 29 26 26 28 56 2e 62 67 6f 64 6e 64 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 63 29 26 26 28 56 2e 63 70 6e 71 6a 6e 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 64 29 26 26 28 56 2e 6b 75 79 64 71 73 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 65 29 26 26 28 56 2e 6c 61 61 6e 74 66 3d 5a 29 29 2c 30 29 29 2c 34 34 37 29 2c 56 2c 30 29 2c 30 29 29 2c 56 29 2c 5b 5d 29 2c 56 29 2c 6b 29 2c 31 34 31 29 29 2c 56 29 2c 5b 32 30 34 38 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 45 78 28 34 2c 4b 29 7d 29 2c 56 2c 33 38 38 29 2c 34 36 30 29 29 2c 34 34 35 29 29 2c 33 Data Ascii: ,V,((V.kuydqs=(V.laantf=[],V.bgodnd=0,V.cpnqjn="",[]),V).v&&V.v.a&&((Z=V.v.b)&&(V.bgodnd=Z),(Z=V.v.c)&&(V.cpnqjn=Z),(Z=V.v.d)&&(V.kuydqs=Z),(Z=V.v.e)&&(V.laantf=Z)),0)),447),V,0),0)),V),[]),V),k),141)),V),[2048]),function(K){Ex(4,K)}),V,388),460)),445)),3
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 72 6e 20 6c 7d 2c 67 72 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 29 7b 66 6f 72 28 59 3d 28 56 3d 4f 28 28 53 3d 28 28 28 6c 3d 28 50 3d 5a 5b 68 31 5d 7c 7c 7b 7d 2c 4f 28 5a 29 29 2c 50 29 2e 78 44 3d 4f 28 5a 29 2c 50 29 2e 58 3d 5b 5d 2c 5a 2e 73 3d 3d 5a 3f 28 4e 28 5a 29 7c 30 29 2d 31 3a 31 29 2c 5a 29 29 2c 30 29 3b 59 3c 53 3b 59 2b 2b 29 50 2e 58 2e 70 75 73 68 28 4f 28 5a 29 29 3b 66 6f 72 28 3b 53 2d 2d 3b 29 50 2e 58 5b 53 5d 3d 67 28 50 2e 58 5b 53 5d 2c 5a 29 3b 72 65 74 75 72 6e 20 50 2e 52 62 3d 67 28 56 2c 5a 29 2c 50 2e 71 45 3d 67 28 6c 2c 5a 29 2c 50 7d 2c 70 75 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 6c 3d 30 3b 6c 3c 33 3b 6c 2b 2b 29 56 5b Data Ascii: rn l},gr=function(Z,V,l,Y,P,S){for(Y=(V=O((S=(((l=(P=Z[h1]\|\|{},O(Z)),P).xD=O(Z),P).X=[],Z.s==Z?(N(Z)\|0)-1:1),Z)),0);Y<S;Y++)P.X.push(O(Z));for(;S--;)P.X[S]=g(P.X[S],Z);return P.Rb=g(V,Z),P.qE=g(l,Z),P},pu=function(Z,V,l){if(Z.length==3){for(l=0;l<3;l++)V[
2025-01-15 16:46:45 UTC	1390	IN	Data Raw: 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 3d 3d 31 33 30 7c 7c 5a 3d 3d 34 34 37 29 56 2e 4b 5b 5a 5d 3f 56 2e 4b 5b 5a 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 56 2e 4b 5b 5a 5d 3d 65 4e 28 6c 2c 56 29 3b 65 6c 73 65 7b 69 66 28 56 2e 57 32 26 26 5a 21 3d 31 31 29 72 65 74 75 72 6e 3b 5a 3d 3d 31 37 34 7c 7c 5a 3d 3d 33 37 7c 7c 5a 3d 3d 39 7c 7c 5a 3d 3d 33 35 32 7c 7c 5a 3d 3d 39 30 7c 7c 5a 3d 3d 32 38 34 7c 7c 5a 3d 3d 34 38 32 7c 7c 5a 3d 3d 33 31 36 7c 7c 5a 3d 3d 33 37 36 7c 7c 5a 3d 3d 32 38 33 3f 56 2e 4b 5b 5a 5d 7c 7c 28 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 36 32 2c 6c 29 29 3a 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 35 37 2c 6c 29 7d 5a 3d 3d 31 31 26 26 28 56 2e 52 3d 63 28 33 32 2c 66 61 6c 73 65 2c 56 29 2c 56 Data Ascii: ,U=function(Z,V,l){if(Z==130\|\|Z==447)V.K[Z]?V.K[Z].concat(l):V.K[Z]=eN(l,V);else{if(V.W2&&Z!=11)return;Z==174\|\|Z==37\|\|Z==9\|\|Z==352\|\|Z==90\|\|Z==284\|\|Z==482\|\|Z==316\|\|Z==376\|\|Z==283?V.K[Z]\|\|(V.K[Z]=Zn(Z,V,62,l)):V.K[Z]=Zn(Z,V,57,l)}Z==11&&(V.R=c(32,false,V),V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49781	162.247.243.39	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:46 UTC	609	OUT	GET /nr-spa-1.278.2.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://brightmorningteam.activehosted.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:46 UTC	551	IN	HTTP/1.1 200 OK Connection: close Content-Length: 113889 Last-Modified: Thu, 09 Jan 2025 23:21:14 GMT ETag: "1c1f4d86af33dfbde894fed8be69496e" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 Jan 2025 16:46:46 GMT X-Served-By: cache-ewr-kewr1740047-EWR X-Cache: HIT X-Cache-Hits: 74 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 37 38 2e 32 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 37 38 2e 32 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 37 38 2e 32 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 38 5d 2c 7b 37 36 39 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 49 3a 28 29 3d 3e 73 2c 4e 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 36 34 65 33 2c 73 3d 31 65 36 7d 2c 32 31 32 33 3a 28 65 2c 74 Data Ascii: /! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 2a 5b 5e 28 29 5d 2a 28 3f 3a 20 5c 5b 61 73 20 5c 53 2b 5c 5d 29 3f 29 20 29 3f 5c 28 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 7c 68 74 74 70 73 7c 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 29 3a 2e 2a 3f 29 3f 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 29 3f 5c 73 2a 24 2f 69 2c 70 3d 2f 5e 5c 73 2a 28 3f 3a 28 5c 53 2a 7c 67 6c 6f 62 61 6c 20 63 6f 64 65 29 28 3f 3a 5c 28 2e 2a 3f 5c 29 29 3f 40 29 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 7c 68 74 74 70 73 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 2d 65 78 74 65 6e 73 69 6f 6e 29 2e 2a 3f 29 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 73 2a 24 2f 69 2c 66 3d 2f 5e 5c 73 2a 61 74 20 2e 2b 20 5c 28 65 76 61 6c 20 61 74 20 5c 53 2b 20 5c 28 28 3f 3a 28 3f 3a 66 69 6c 65 7c 68 Data Ascii: [^()](?: \[as \S+\])?) )?$?((?:file\|http\|https\|chrome-extension):.?)?:(\d+)(?::(\d+))?$?\s$/i,p=/^\s(?:(\S\|global code)(?:$.?$)?@)?((?:file\|http\|https\|chrome\|safari-extension).?):(\d+)(?::(\d+))?\s$/i,f=/^\sat .+ \(eval at \S+ \((?:(?:file\|h
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 28 65 2c 6f 2e 54 29 2c 74 68 69 73 2e 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 3d 30 2c 74 68 69 73 2e 66 69 72 73 74 42 79 74 65 54 6f 57 69 6e 64 6f 77 4c 6f 61 64 3d 30 2c 74 68 69 73 2e 66 69 72 73 74 42 79 74 65 54 6f 44 6f 6d 43 6f 6e 74 65 6e 74 3d 30 2c 21 28 30 2c 61 2e 66 6e 29 28 65 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 65 2e 61 62 6f 72 74 28 29 2c 28 30 2c 6c 2e 52 29 28 34 33 29 3b 65 2e 72 75 6e 74 69 6d 65 2e 74 69 6d 65 4b 65 65 70 65 72 3d 6e 65 77 20 62 28 65 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2c 72 2e 52 49 3f 67 2e 6a 2e 73 75 62 73 63 72 69 62 65 28 28 28 7b 76 61 6c 75 65 3a 65 2c 61 74 74 72 73 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2e 6e 61 76 69 Data Ascii: (e,o.T),this.timeToFirstByte=0,this.firstByteToWindowLoad=0,this.firstByteToDomContent=0,!(0,a.fn)(e.agentIdentifier))return this.ee.abort(),(0,l.R)(43);e.runtime.timeKeeper=new b(e.agentIdentifier),r.RI?g.j.subscribe((({value:e,attrs:t})=>{const i=t.navi
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 70 29 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 73 6d 65 61 72 45 76 74 73 42 79 4f 72 69 67 69 6e 28 65 29 2c 72 3d 74 2e 73 6f 72 74 28 28 28 65 2c 74 29 3d 3e 65 2e 73 2d 74 2e 73 29 29 2e 72 65 64 75 63 65 28 69 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 72 29 2e 66 6c 61 74 28 29 7d 29 2c 74 68 69 73 29 2c 65 61 72 6c 69 65 73 74 54 69 6d 65 53 74 61 6d 70 3a 74 68 69 73 2e 65 61 72 6c 69 65 73 74 54 69 6d 65 53 74 61 6d 70 2c 6c 61 74 65 73 74 54 69 6d 65 53 74 61 6d 70 3a 74 68 69 73 2e 6c 61 74 65 73 74 54 69 6d 65 53 74 61 6d 70 7d 7d 73 6d 65 61 72 45 76 74 73 42 79 4f 72 69 67 69 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 70 5b 65 5d 5b 30 5d 2c 69 3d 70 5b 65 Data Ascii: f(!(e in p))return t;const i=this.smearEvtsByOrigin(e),r=t.sort(((e,t)=>e.s-t.s)).reduce(i,{});return Object.values(r).flat()}),this),earliestTimeStamp:this.earliestTimeStamp,latestTimeStamp:this.latestTimeStamp}}smearEvtsByOrigin(e){const t=p[e][0],i=p[e
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 69 67 67 65 72 3d 3d 3d 75 2e 70 50 26 26 28 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 7c 7c 28 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 3d 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 6e 50 72 6f 67 72 65 73 73 3d 6e 65 77 20 53 28 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 75 2e 41 4d 2c 65 2c 74 2e 6c 61 74 65 73 74 52 6f 75 74 65 53 65 74 42 79 41 70 69 29 2c 74 2e 64 6f 6d 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 Data Ascii: igger===u.pP&&(this.associatedInteraction=null),this.associatedInteraction\|\|(this.associatedInteraction=t.interactionInProgress=new S(t.agentIdentifier,u.AM,e,t.latestRouteSetByApi),t.domObserver.observe(document.body,{attributes:!0,childList:!0,subtree:!
2025-01-15 16:46:46 UTC	16384	IN	Data Raw: 28 65 2c 74 29 7b 69 66 28 21 65 2e 6f 6e 45 6e 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6f 6e 45 6e 64 20 68 61 6e 64 6c 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 29 3b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 73 20 64 75 72 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 29 3b 74 68 69 73 2e 6f 6e 45 6e 64 3d 65 2e 6f 6e 45 6e 64 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 4d 73 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 74 68 69 73 2e 63 72 65 61 74 65 28 74 68 69 73 2e 6f 6e 45 6e 64 2c 74 29 7d 63 72 65 61 74 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 6d 65 72 26 26 74 68 69 73 2e 63 6c 65 Data Ascii: (e,t){if(!e.onEnd)throw new Error("onEnd handler is required");if(!t)throw new Error("ms duration is required");this.onEnd=e.onEnd,this.initialMs=t,this.startTimestamp=Date.now(),this.timer=this.create(this.onEnd,t)}create(e,t){return this.timer&&this.cle
2025-01-15 16:46:46 UTC	15585	IN	Data Raw: 4f 70 74 73 2c 74 2e 74 61 72 67 65 74 29 2c 69 2e 6d 61 70 28 28 28 7b 74 61 72 67 65 74 41 70 70 3a 65 2c 64 61 74 61 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 7b 62 6f 64 79 3a 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 72 28 74 29 3a 74 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 72 79 53 74 72 69 6e 67 73 42 75 69 6c 64 65 72 26 26 28 69 2e 71 73 3d 74 68 69 73 2e 71 75 65 72 79 53 74 72 69 6e 67 73 42 75 69 6c 64 65 72 28 74 29 29 2c 7b 74 61 72 67 65 74 41 70 70 3a 65 2c 70 61 79 6c 6f 61 64 3a 69 7d 7d 29 29 7d 70 6f 73 74 48 61 72 76 65 73 74 43 6c 65 61 6e 75 70 28 65 3d 7b 7d 29 7b 65 2e 73 65 6e 74 26 26 65 2e 72 65 74 72 79 26 26 74 68 69 73 2e 65 76 65 6e 74 73 2e 72 65 6c 6f 61 64 53 Data Ascii: Opts,t.target),i.map((({targetApp:e,data:t})=>{const i={body:this.serializer?this.serializer(t):t};return this.queryStringsBuilder&&(i.qs=this.queryStringsBuilder(t)),{targetApp:e,payload:i}}))}postHarvestCleanup(e={}){e.sent&&e.retry&&this.events.reloadS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49777	142.250.185.68	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:46 UTC	495	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:46 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 16:46:46 GMT Date: Wed, 15 Jan 2025 16:46:46 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:46 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2025-01-15 16:46:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49779	142.250.185.68	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:46 UTC	487	OUT	GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:46 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18936 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 11:32:46 GMT Expires: Thu, 15 Jan 2026 11:32:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Dec 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 18840 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:46:46 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 5a 29 7b 69 66 28 5a 3d 28 56 3d 6e 75 6c 6c 2c 4b 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 5a 7c 7c 21 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 56 3b 74 72 79 7b 56 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 59 7d 29 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 29 7b 72 65 74 75 72 6e 28 53 3d 28 59 3d 5b 2d 34 39 2c 37 36 2c 37 31 2c 2d 34 2c 36 32 2c 2d 32 30 2c 59 2c 2d 31 35 2c 36 35 2c 2d 34 30 5d 2c 50 3d 28 49 3d 56 70 2c 6c 26 37 29 2c 43 29 5b 56 2e 4c 5d 28 56 2e 6e 53 29 2c 53 29 5b 56 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 50 2b 3d 36 2b 28 51 3d 57 2c 37 29 2a 6c 2c 50 26 3d 37 7d 2c 53 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 28 28 51 3d 28 57 3d 28 57 3d 2b 28 57 3d 5a 25 31 36 2b 31 2c 59 29 5b 50 2b 37 35 26 37 5d 2a 5a 2a 57 2d 31 36 30 2a Data Ascii: License-Identifier: Apache-2.0','/','var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160*
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 6c 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 56 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 Data Ascii: lice"))return"array";if(l=="[object Function]"\|\|typeof Z.call!="undefined"&&typeof Z.propertyIsEnumerable!="undefined"&&!Z.propertyIsEnumerable("call"))return"function"}else return"null";else if(V=="function"&&typeof Z.call=="undefined")return"object";ret
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 38 7c 32 34 30 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 7c 32 32 34 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 36 26 36 33 7c 31 32 38 29 2c 59 5b 50 2b 2b 5d 3d 56 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 59 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 29 7b 69 66 28 56 3d 56 2e 4b 5b 5a 5d 2c 56 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 5b 58 2c 33 30 2c 5a 5d 3b 69 66 28 56 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 5a 2a 34 2a 5a 2b 37 36 2a 5a 2b 35 33 29 2c 56 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 57 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 29 7b 66 6f 72 28 59 3d Data Ascii: Y[P++]=V>>18\|240,Y[P++]=V>>12&63\|128):Y[P++]=V>>12\|224,Y[P++]=V>>6&63\|128),Y[P++]=V&63\|128);return Y},g=function(Z,V){if(V=V.K[Z],V===void 0)throw[X,30,Z];if(V.value)return V.create();return V.create(Z4Z+76*Z+53),V.prototype},Wq=function(Z,V,l,Y){for(Y=
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 51 3d 67 28 34 38 32 2c 6c 29 29 26 26 51 5b 51 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 49 7c 7c 66 28 6c 2c 34 38 32 2c 5b 49 26 32 35 35 5d 29 29 3a 66 28 6c 2c 32 38 34 2c 5b 39 35 5d 29 2c 66 28 6c 2c 33 37 2c 75 28 5a 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 5a 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6c 2e 73 3d 56 7d 7d 7d 2c 42 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 2c 57 2c 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 69 66 28 7a 3d 67 28 31 33 30 2c 6c 29 2c 7a 3e 3d 6c 2e 49 29 74 68 72 6f 77 5b 58 2c 33 31 5d 3b 66 6f 72 28 4b 3d 28 49 3d 28 51 3d 28 59 3d 30 2c 5a 29 2c 7a 29 2c 6c 2e 6d 64 2e 6c Data Ascii: ength-1]\|\|95,(Q=g(482,l))&&Q[Q.length-1]==I\|\|f(l,482,[I&255])):f(l,284,[95]),f(l,37,u(Z.length,2).concat(Z),9)}finally{l.s=V}}},Bq=function(Z){return Z},c=function(Z,V,l,Y,P,S,Q,I,W,K,z,x,T,L){if(z=g(130,l),z>=l.I)throw[X,31];for(K=(I=(Q=(Y=0,Z),z),l.md.l
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 2e 50 3d 28 56 2e 73 72 3d 30 2c 30 29 2c 5b 5d 29 2c 76 6f 69 64 20 30 29 2c 56 2e 4f 72 3d 21 28 56 2e 49 3d 30 2c 56 2e 4b 3d 5b 5d 2c 56 2e 54 3d 21 28 28 56 2e 56 55 3d 5b 5d 2c 56 29 2e 52 3d 76 6f 69 64 20 30 2c 56 2e 57 32 3d 66 61 6c 73 65 2c 56 2e 4c 53 3d 32 35 2c 56 2e 70 53 3d 50 2c 56 2e 72 6e 3d 28 56 2e 69 3d 76 6f 69 64 20 30 2c 30 29 2c 56 2e 4e 3d 5b 5d 2c 31 29 2c 31 29 2c 56 2e 41 3d 31 2c 56 29 2e 48 32 3d 28 56 2e 6a 49 3d 28 28 56 2e 47 3d 30 2c 56 29 2e 53 3d 5b 5d 2c 5b 5d 29 2c 6c 29 2c 76 6f 69 64 20 30 29 2c 56 2e 67 3d 30 2c 56 29 2e 57 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 6c 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 6c 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 Data Ascii: .P=(V.sr=0,0),[]),void 0),V.Or=!(V.I=0,V.K=[],V.T=!((V.VU=[],V).R=void 0,V.W2=false,V.LS=25,V.pS=P,V.rn=(V.i=void 0,0),V.N=[],1),1),V.A=1,V).H2=(V.jI=((V.G=0,V).S=[],[]),l),void 0),V.g=0,V).W=void 0,window.performance\|\|{}),l.timeOrigin)\|\|(l.timing\|\|{}).na
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 28 31 38 2c 4b 2c 5b 7a 2c 54 2c 78 5d 29 29 7d 2c 28 55 28 33 37 36 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 29 7b 28 78 3d 28 7a 3d 28 78 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 67 28 7a 2c 4b 29 29 21 3d 30 2c 67 28 78 2c 4b 29 29 2c 7a 29 26 26 55 28 31 33 30 2c 4b 2c 78 29 7d 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 28 4c 3d 28 78 3d 28 54 3d 28 78 3d 28 4c 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 4f 28 4b 29 29 2c 54 3d 4f 28 4b 29 2c 67 28 54 2c 4b 29 29 2c 67 28 78 2c 4b 29 29 2c 67 28 4c 2c 4b 29 29 2c 55 29 28 7a 2c 4b 2c 47 73 28 78 2c 4c 2c 54 2c 4b 29 29 7d 2c 28 55 28 31 38 2c 56 2c 28 55 28 33 34 38 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 66 6f 72 28 78 3d Data Ascii: (18,K,[z,T,x]))},(U(376,(y(function(K,z,x){(x=(z=(x=O((z=O(K),K)),g(z,K))!=0,g(x,K)),z)&&U(130,K,x)},(y(function(K,z,x,T,L){(L=(x=(T=(x=(L=O((z=O(K),K)),O(K)),T=O(K),g(T,K)),g(x,K)),g(L,K)),U)(z,K,Gs(x,L,T,K))},(U(18,V,(U(348,(y(function(K,z,x,T,L){for(x=
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 2c 56 2c 28 28 56 2e 6b 75 79 64 71 73 3d 28 56 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 56 2e 62 67 6f 64 6e 64 3d 30 2c 56 2e 63 70 6e 71 6a 6e 3d 22 22 2c 5b 5d 29 2c 56 29 2e 76 26 26 56 2e 76 2e 61 26 26 28 28 5a 3d 56 2e 76 2e 62 29 26 26 28 56 2e 62 67 6f 64 6e 64 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 63 29 26 26 28 56 2e 63 70 6e 71 6a 6e 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 64 29 26 26 28 56 2e 6b 75 79 64 71 73 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 65 29 26 26 28 56 2e 6c 61 61 6e 74 66 3d 5a 29 29 2c 30 29 29 2c 34 34 37 29 2c 56 2c 30 29 2c 30 29 29 2c 56 29 2c 5b 5d 29 2c 56 29 2c 6b 29 2c 31 34 31 29 29 2c 56 29 2c 5b 32 30 34 38 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 45 78 28 34 2c 4b 29 7d 29 2c 56 2c 33 38 38 29 2c 34 36 30 29 29 2c 34 34 35 29 29 2c 33 Data Ascii: ,V,((V.kuydqs=(V.laantf=[],V.bgodnd=0,V.cpnqjn="",[]),V).v&&V.v.a&&((Z=V.v.b)&&(V.bgodnd=Z),(Z=V.v.c)&&(V.cpnqjn=Z),(Z=V.v.d)&&(V.kuydqs=Z),(Z=V.v.e)&&(V.laantf=Z)),0)),447),V,0),0)),V),[]),V),k),141)),V),[2048]),function(K){Ex(4,K)}),V,388),460)),445)),3
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 72 6e 20 6c 7d 2c 67 72 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 29 7b 66 6f 72 28 59 3d 28 56 3d 4f 28 28 53 3d 28 28 28 6c 3d 28 50 3d 5a 5b 68 31 5d 7c 7c 7b 7d 2c 4f 28 5a 29 29 2c 50 29 2e 78 44 3d 4f 28 5a 29 2c 50 29 2e 58 3d 5b 5d 2c 5a 2e 73 3d 3d 5a 3f 28 4e 28 5a 29 7c 30 29 2d 31 3a 31 29 2c 5a 29 29 2c 30 29 3b 59 3c 53 3b 59 2b 2b 29 50 2e 58 2e 70 75 73 68 28 4f 28 5a 29 29 3b 66 6f 72 28 3b 53 2d 2d 3b 29 50 2e 58 5b 53 5d 3d 67 28 50 2e 58 5b 53 5d 2c 5a 29 3b 72 65 74 75 72 6e 20 50 2e 52 62 3d 67 28 56 2c 5a 29 2c 50 2e 71 45 3d 67 28 6c 2c 5a 29 2c 50 7d 2c 70 75 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 6c 3d 30 3b 6c 3c 33 3b 6c 2b 2b 29 56 5b Data Ascii: rn l},gr=function(Z,V,l,Y,P,S){for(Y=(V=O((S=(((l=(P=Z[h1]\|\|{},O(Z)),P).xD=O(Z),P).X=[],Z.s==Z?(N(Z)\|0)-1:1),Z)),0);Y<S;Y++)P.X.push(O(Z));for(;S--;)P.X[S]=g(P.X[S],Z);return P.Rb=g(V,Z),P.qE=g(l,Z),P},pu=function(Z,V,l){if(Z.length==3){for(l=0;l<3;l++)V[
2025-01-15 16:46:46 UTC	1390	IN	Data Raw: 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 3d 3d 31 33 30 7c 7c 5a 3d 3d 34 34 37 29 56 2e 4b 5b 5a 5d 3f 56 2e 4b 5b 5a 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 56 2e 4b 5b 5a 5d 3d 65 4e 28 6c 2c 56 29 3b 65 6c 73 65 7b 69 66 28 56 2e 57 32 26 26 5a 21 3d 31 31 29 72 65 74 75 72 6e 3b 5a 3d 3d 31 37 34 7c 7c 5a 3d 3d 33 37 7c 7c 5a 3d 3d 39 7c 7c 5a 3d 3d 33 35 32 7c 7c 5a 3d 3d 39 30 7c 7c 5a 3d 3d 32 38 34 7c 7c 5a 3d 3d 34 38 32 7c 7c 5a 3d 3d 33 31 36 7c 7c 5a 3d 3d 33 37 36 7c 7c 5a 3d 3d 32 38 33 3f 56 2e 4b 5b 5a 5d 7c 7c 28 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 36 32 2c 6c 29 29 3a 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 35 37 2c 6c 29 7d 5a 3d 3d 31 31 26 26 28 56 2e 52 3d 63 28 33 32 2c 66 61 6c 73 65 2c 56 29 2c 56 Data Ascii: ,U=function(Z,V,l){if(Z==130\|\|Z==447)V.K[Z]?V.K[Z].concat(l):V.K[Z]=eN(l,V);else{if(V.W2&&Z!=11)return;Z==174\|\|Z==37\|\|Z==9\|\|Z==352\|\|Z==90\|\|Z==284\|\|Z==482\|\|Z==316\|\|Z==376\|\|Z==283?V.K[Z]\|\|(V.K[Z]=Zn(Z,V,62,l)):V.K[Z]=Zn(Z,V,57,l)}Z==11&&(V.R=c(32,false,V),V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	172.217.18.4	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:46 UTC	889	OUT	GET /recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LcwIw8TAAAAACP1ysM08EhCgzd6q5JAOUR1a0Go HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:47 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 16:46:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Xcly_Myj5I-nUhLul-RXSQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:46:47 UTC	229	IN	Data Raw: 31 65 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 Data Ascii: 1e14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* c
2025-01-15 16:46:47 UTC	1390	IN	Data Raw: 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 Data Ascii: yrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A6
2025-01-15 16:46:47 UTC	1390	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+0
2025-01-15 16:46:47 UTC	1390	IN	Data Raw: 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-01-15 16:46:47 UTC	1390	IN	Data Raw: 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family:
2025-01-15 16:46:47 UTC	1390	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-01-15 16:46:47 UTC	529	IN	Data Raw: 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 58 63 6c 79 5f 4d 79 6a 35 49 2d 6e 55 68 4c 75 6c 2d 52 58 53 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 58 63 6c 79 5f 4d 79 6a 35 49 2d 6e 55 68 4c 75 6c 2d 52 58 53 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 Data Ascii: n3uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="Xcly_Myj5I-nUhLul-RXSQ"> </script></head><body><input type="hidden" id="recaptcha-token"><script type="text/javascript" nonce="Xcly_Myj5I-nUhLul-RXSQ"> recaptcha.frame.Main.init("[\x2
2025-01-15 16:46:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49782	18.245.45.143	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:46 UTC	624	OUT	GET /media/favicon.ico HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://brightmorningteam.activehosted.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:47 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 730 Connection: close Last-Modified: Wed, 23 Feb 2022 16:14:06 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 15 Jan 2025 07:16:33 GMT ETag: "2ed86f7b79c7afa8fc13da5d9180c70a" X-Cache: Hit from cloudfront Via: 1.1 90b31bff657d66dd87e437e4a49bf7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: AxrfDZboqoOv6_pFlQWbBAl_QjjvmD7nOLq8PUnLAmNPrYOK7oJLIg== Age: 34215
2025-01-15 16:46:47 UTC	730	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6f 49 44 41 54 78 01 ed 99 3d 4c 1b 41 10 85 df 25 11 4a 94 22 49 43 94 2e 4e 91 34 89 94 92 12 e4 36 ca 4f 99 34 01 01 35 6e 81 02 bb 80 16 43 8b 10 d0 00 1d 3f 0d a2 40 18 d1 40 c3 8f 4c 43 63 a0 84 06 90 00 21 51 c0 3e 2d a7 bb b3 0d b2 7d b3 b7 42 da 4f 3a dd 69 bd c5 be d9 37 b3 73 67 0f 3f 6e 6f f1 84 79 86 27 8e 13 60 1b 27 c0 36 4e 80 6d 9c 00 db 88 08 18 f8 0b fc 6e 81 15 44 04 a4 9a 81 b9 7e 60 b8 0b 78 fb 1a 89 22 6a a1 cc 2f 60 7b 14 f8 d8 8c c4 10 11 b0 73 18 3c 73 f1 07 e3 da 56 49 e0 49 Data Ascii: PNGIHDR00WpHYs%%IR$sRGBgAMAaoIDATx=LA%J"IC.N46O45nC?@@LCc!Q>-}BO:i7sg?noy'`'6NmnD~`x"j/`{s<sVII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49783	162.247.243.39	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:47 UTC	366	OUT	GET /nr-spa-1.278.2.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:47 UTC	551	IN	HTTP/1.1 200 OK Connection: close Content-Length: 113889 Last-Modified: Thu, 09 Jan 2025 23:21:14 GMT ETag: "1c1f4d86af33dfbde894fed8be69496e" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 Jan 2025 16:46:47 GMT X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: HIT X-Cache-Hits: 74 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 37 38 2e 32 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 37 38 2e 32 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 37 38 2e 32 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 38 5d 2c 7b 37 36 39 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 49 3a 28 29 3d 3e 73 2c 4e 3a 28 29 3d 3e 72 7d 29 3b 63 6f 6e 73 74 20 72 3d 36 34 65 33 2c 73 3d 31 65 36 7d 2c 32 31 32 33 3a 28 65 2c 74 Data Ascii: /! For license information please see nr-spa-1.278.2.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.278.2.PROD"]=self["webpackChunk:NRBA-1.278.2.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>s,N:()=>r});const r=64e3,s=1e6},2123:(e,t
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 2a 5b 5e 28 29 5d 2a 28 3f 3a 20 5c 5b 61 73 20 5c 53 2b 5c 5d 29 3f 29 20 29 3f 5c 28 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 7c 68 74 74 70 73 7c 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 29 3a 2e 2a 3f 29 3f 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 29 3f 5c 73 2a 24 2f 69 2c 70 3d 2f 5e 5c 73 2a 28 3f 3a 28 5c 53 2a 7c 67 6c 6f 62 61 6c 20 63 6f 64 65 29 28 3f 3a 5c 28 2e 2a 3f 5c 29 29 3f 40 29 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 7c 68 74 74 70 73 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 2d 65 78 74 65 6e 73 69 6f 6e 29 2e 2a 3f 29 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 73 2a 24 2f 69 2c 66 3d 2f 5e 5c 73 2a 61 74 20 2e 2b 20 5c 28 65 76 61 6c 20 61 74 20 5c 53 2b 20 5c 28 28 3f 3a 28 3f 3a 66 69 6c 65 7c 68 Data Ascii: [^()](?: \[as \S+\])?) )?$?((?:file\|http\|https\|chrome-extension):.?)?:(\d+)(?::(\d+))?$?\s$/i,p=/^\s(?:(\S\|global code)(?:$.?$)?@)?((?:file\|http\|https\|chrome\|safari-extension).?):(\d+)(?::(\d+))?\s$/i,f=/^\sat .+ \(eval at \S+ \((?:(?:file\|h
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 28 65 2c 6f 2e 54 29 2c 74 68 69 73 2e 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 3d 30 2c 74 68 69 73 2e 66 69 72 73 74 42 79 74 65 54 6f 57 69 6e 64 6f 77 4c 6f 61 64 3d 30 2c 74 68 69 73 2e 66 69 72 73 74 42 79 74 65 54 6f 44 6f 6d 43 6f 6e 74 65 6e 74 3d 30 2c 21 28 30 2c 61 2e 66 6e 29 28 65 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 65 2e 61 62 6f 72 74 28 29 2c 28 30 2c 6c 2e 52 29 28 34 33 29 3b 65 2e 72 75 6e 74 69 6d 65 2e 74 69 6d 65 4b 65 65 70 65 72 3d 6e 65 77 20 62 28 65 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 2c 72 2e 52 49 3f 67 2e 6a 2e 73 75 62 73 63 72 69 62 65 28 28 28 7b 76 61 6c 75 65 3a 65 2c 61 74 74 72 73 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2e 6e 61 76 69 Data Ascii: (e,o.T),this.timeToFirstByte=0,this.firstByteToWindowLoad=0,this.firstByteToDomContent=0,!(0,a.fn)(e.agentIdentifier))return this.ee.abort(),(0,l.R)(43);e.runtime.timeKeeper=new b(e.agentIdentifier),r.RI?g.j.subscribe((({value:e,attrs:t})=>{const i=t.navi
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 66 28 21 28 65 20 69 6e 20 70 29 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 73 6d 65 61 72 45 76 74 73 42 79 4f 72 69 67 69 6e 28 65 29 2c 72 3d 74 2e 73 6f 72 74 28 28 28 65 2c 74 29 3d 3e 65 2e 73 2d 74 2e 73 29 29 2e 72 65 64 75 63 65 28 69 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 72 29 2e 66 6c 61 74 28 29 7d 29 2c 74 68 69 73 29 2c 65 61 72 6c 69 65 73 74 54 69 6d 65 53 74 61 6d 70 3a 74 68 69 73 2e 65 61 72 6c 69 65 73 74 54 69 6d 65 53 74 61 6d 70 2c 6c 61 74 65 73 74 54 69 6d 65 53 74 61 6d 70 3a 74 68 69 73 2e 6c 61 74 65 73 74 54 69 6d 65 53 74 61 6d 70 7d 7d 73 6d 65 61 72 45 76 74 73 42 79 4f 72 69 67 69 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 70 5b 65 5d 5b 30 5d 2c 69 3d 70 5b 65 Data Ascii: f(!(e in p))return t;const i=this.smearEvtsByOrigin(e),r=t.sort(((e,t)=>e.s-t.s)).reduce(i,{});return Object.values(r).flat()}),this),earliestTimeStamp:this.earliestTimeStamp,latestTimeStamp:this.latestTimeStamp}}smearEvtsByOrigin(e){const t=p[e][0],i=p[e
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 69 67 67 65 72 3d 3d 3d 75 2e 70 50 26 26 28 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 7c 7c 28 74 68 69 73 2e 61 73 73 6f 63 69 61 74 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 3d 74 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 6e 50 72 6f 67 72 65 73 73 3d 6e 65 77 20 53 28 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 75 2e 41 4d 2c 65 2c 74 2e 6c 61 74 65 73 74 52 6f 75 74 65 53 65 74 42 79 41 70 69 29 2c 74 2e 64 6f 6d 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 21 30 2c 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 Data Ascii: igger===u.pP&&(this.associatedInteraction=null),this.associatedInteraction\|\|(this.associatedInteraction=t.interactionInProgress=new S(t.agentIdentifier,u.AM,e,t.latestRouteSetByApi),t.domObserver.observe(document.body,{attributes:!0,childList:!0,subtree:!
2025-01-15 16:46:47 UTC	16384	IN	Data Raw: 28 65 2c 74 29 7b 69 66 28 21 65 2e 6f 6e 45 6e 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6f 6e 45 6e 64 20 68 61 6e 64 6c 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 29 3b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 73 20 64 75 72 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 29 3b 74 68 69 73 2e 6f 6e 45 6e 64 3d 65 2e 6f 6e 45 6e 64 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 4d 73 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 74 68 69 73 2e 63 72 65 61 74 65 28 74 68 69 73 2e 6f 6e 45 6e 64 2c 74 29 7d 63 72 65 61 74 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 6d 65 72 26 26 74 68 69 73 2e 63 6c 65 Data Ascii: (e,t){if(!e.onEnd)throw new Error("onEnd handler is required");if(!t)throw new Error("ms duration is required");this.onEnd=e.onEnd,this.initialMs=t,this.startTimestamp=Date.now(),this.timer=this.create(this.onEnd,t)}create(e,t){return this.timer&&this.cle
2025-01-15 16:46:47 UTC	15585	IN	Data Raw: 4f 70 74 73 2c 74 2e 74 61 72 67 65 74 29 2c 69 2e 6d 61 70 28 28 28 7b 74 61 72 67 65 74 41 70 70 3a 65 2c 64 61 74 61 3a 74 7d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 7b 62 6f 64 79 3a 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 72 28 74 29 3a 74 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 72 79 53 74 72 69 6e 67 73 42 75 69 6c 64 65 72 26 26 28 69 2e 71 73 3d 74 68 69 73 2e 71 75 65 72 79 53 74 72 69 6e 67 73 42 75 69 6c 64 65 72 28 74 29 29 2c 7b 74 61 72 67 65 74 41 70 70 3a 65 2c 70 61 79 6c 6f 61 64 3a 69 7d 7d 29 29 7d 70 6f 73 74 48 61 72 76 65 73 74 43 6c 65 61 6e 75 70 28 65 3d 7b 7d 29 7b 65 2e 73 65 6e 74 26 26 65 2e 72 65 74 72 79 26 26 74 68 69 73 2e 65 76 65 6e 74 73 2e 72 65 6c 6f 61 64 53 Data Ascii: Opts,t.target),i.map((({targetApp:e,data:t})=>{const i={body:this.serializer?this.serializer(t):t};return this.queryStringsBuilder&&(i.qs=this.queryStringsBuilder(t)),{targetApp:e,payload:i}}))}postHarvestCleanup(e={}){e.sent&&e.retry&&this.events.reloadS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49785	18.245.45.59	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:47 UTC	370	OUT	GET /media/favicon.ico HTTP/1.1 Host: d3rxaij56vjege.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:48 UTC	472	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 730 Connection: close Last-Modified: Wed, 23 Feb 2022 16:14:06 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 15 Jan 2025 07:16:33 GMT ETag: "2ed86f7b79c7afa8fc13da5d9180c70a" X-Cache: Hit from cloudfront Via: 1.1 1e53d5f889e2ac50f0d7b6cad073c03e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 6F8FNHtDHujoWg1Vkc-oxg6JnaEBXCoK15LSCXgdlNFkZurmrpEiVw== Age: 34216
2025-01-15 16:46:48 UTC	730	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6f 49 44 41 54 78 01 ed 99 3d 4c 1b 41 10 85 df 25 11 4a 94 22 49 43 94 2e 4e 91 34 89 94 92 12 e4 36 ca 4f 99 34 01 01 35 6e 81 02 bb 80 16 43 8b 10 d0 00 1d 3f 0d a2 40 18 d1 40 c3 8f 4c 43 63 a0 84 06 90 00 21 51 c0 3e 2d a7 bb b3 0d b2 7d b3 b7 42 da 4f 3a dd 69 bd c5 be d9 37 b3 73 67 0f 3f 6e 6f f1 84 79 86 27 8e 13 60 1b 27 c0 36 4e 80 6d 9c 00 db 88 08 18 f8 0b fc 6e 81 15 44 04 a4 9a 81 b9 7e 60 b8 0b 78 fb 1a 89 22 6a a1 cc 2f 60 7b 14 f8 d8 8c c4 10 11 b0 73 18 3c 73 f1 07 e3 da 56 49 e0 49 Data Ascii: PNGIHDR00WpHYs%%IR$sRGBgAMAaoIDATx=LA%J"IC.N46O45nC?@@LCc!Q>-}BO:i7sg?noy'`'6NmnD~`x"j/`{s<sVII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49786	162.247.243.29	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:48 UTC	925	OUT	GET /1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=10822&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605&af=err,spa,xhr,stn,ins&ap=322&be=2643&fe=7361&dc=1116&at=HxVHFgsdRU4UBRZfSBlK&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736959595292,%22n%22:0,%22f%22:1713,%22dn%22:1716,%22dne%22:1716,%22c%22:1716,%22s%22:1717,%22ce%22:2175,%22rq%22:2175,%22rp%22:2643,%22rpe%22:2911,%22di%22:3758,%22ds%22:3758,%22de%22:3759,%22dc%22:9998,%22l%22:9998,%22le%22:10004%7D,%22navigation%22:%7B%7D%7D&fp=3767&fcp=3767 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:48 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 15 Jan 2025 16:46:48 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-ewr-kewr1740070-EWR
2025-01-15 16:46:48 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49788	162.247.243.29	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:46:48 UTC	535	OUT	GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=11489&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:46:49 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 15 Jan 2025 16:46:49 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740073-EWR
2025-01-15 16:46:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49812	162.247.243.29	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:47:18 UTC	535	OUT	GET /events/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41493&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:47:18 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 15 Jan 2025 16:47:18 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740068-EWR
2025-01-15 16:47:18 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49814	162.247.243.29	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:47:18 UTC	537	OUT	GET /jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=41499&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:47:18 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 15 Jan 2025 16:47:18 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740058-EWR
2025-01-15 16:47:18 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50006	162.247.243.29	443	2412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:47:48 UTC	537	OUT	GET /jserrors/1/d3d5c809d5?a=456978955&v=1.278.2&to=M1JQYEMHVhFXB0AMXAoYZ0ZYSV5NQA1REh0UX0I%3D&rst=71509&ck=0&s=94640e84d6b39649&ref=https://brightmorningteam.activehosted.com/f/158&ptid=3a23e012b4bdc605 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:47:48 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 15 Jan 2025 16:47:48 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740067-EWR
2025-01-15 16:47:48 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5460, Parent PID: 2568

General

Target ID:	0
Start time:	11:46:25
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2412, Parent PID: 5460

General

Target ID:	2
Start time:	11:46:29
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2364,i,14294915167031781044,245127136332851644,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6536, Parent PID: 2568

General

Target ID:	4
Start time:	11:46:35
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Windows Analysis Report
https://brightmorningteam.acemlna.com/lt.php?x=3DZy~GE4JILM6X77_gxIURWf1HNRj_P1k-1iZKM6KXec5aKvzUy.0OFy1nRzkNfulfYwbHPJJFKa