Edit tour

Windows Analysis Report
https://dev-lti.bncollge.com

Overview

General Information

Sample URL:	https://dev-lti.bncollge.com
Analysis ID:	1324984
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains password input but no form action

Found iframes

HTML title does not match URL

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3036 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,14725677100361710085,17135645198486768800,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5424 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-lti.bncollge.com MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

String found in binary or memory: return b}AB.F="internal.enableAutoEventOnTimer";var nc=ca(["data-gtm-yt-inspected-"]),BB=["www.youtube.com","www.youtube-nocookie.com"],CB,DB=!1; equals www.youtube.com (Youtube)

Source: chromecache_195.1.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_257.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_195.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_200.1.dr	String found in binary or memory: https://afs.googlesyndication.com
Source: chromecache_208.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_137.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_164.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_164.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_164.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_164.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_164.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_186.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_200.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_163.1.dr	String found in binary or memory: https://github.com/JakeChampion/polyfill-service.
Source: chromecache_179.1.dr	String found in binary or memory: https://github.com/lancedikson/bowser
Source: chromecache_137.1.dr, chromecache_200.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_200.1.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_164.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_164.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_244.1.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_244.1.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_244.1.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_208.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_164.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_164.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_164.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_164.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_208.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_137.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_165.1.dr	String found in binary or memory: https://www.afternic.com/legal#privacy_policy
Source: chromecache_228.1.dr, chromecache_137.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_208.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_208.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_208.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_208.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_164.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_252.1.dr, chromecache_164.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_137.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_208.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_164.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__.
Source: chromecache_252.1.dr, chromecache_264.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Source: unknown	HTTPS traffic detected: 72.247.100.147:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.247.100.147:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.7:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.7:49827 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3036_1562367488

Jump to behavior

Source: classification engine

Classification label: clean2.win@21/129@84/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,14725677100361710085,17135645198486768800,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-lti.bncollge.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,14725677100361710085,17135645198486768800,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://dev-lti.bncollge.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__.	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
http://ww38.dev-lti.bncollge.com/track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D	0%	Avira URL Cloud	safe
http://ww38.dev-lti.bncollge.com/favicon.ico	0%	Avira URL Cloud	safe
https://55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com/intake/v2/rum/events	0%	Avira URL Cloud	safe
http://ww38.dev-lti.bncollge.com/ls.php?t=65286552&token=b6682987fe9fb1fea8e96b18c4acb7ce6710a23b	0%	Avira URL Cloud	safe
https://dev-lti.bncollge.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
034717.parkingcrew.net	13.248.148.254	true	false	high
accounts.google.com	142.250.72.141	true	false	high
dev-lti.bncollge.com	103.224.182.240	true	false	unknown
stats.g.doubleclick.net	142.251.2.157	true	false	high
proxy.gdw55e.elastic-cloud.com	44.234.208.169	true	false	unknown
www3.l.google.com	142.250.188.238	true	false	high
www.google.com	142.250.176.4	true	false	high
clients.l.google.com	142.250.68.46	true	false	high
location.l.force.com	13.110.38.63	true	false	high
unpkg.com	104.16.124.175	true	false	high
c.parkingcrew.net	185.53.178.30	true	false	high
d38psrni17bvxu.cloudfront.net	52.85.39.16	true	false	high
dzfq4ouujrxm8.cloudfront.net	65.8.164.48	true	false	high
img1.wsimg.com	unknown	unknown	false	high
siteintercept.qualtrics.com	unknown	unknown	false	high
ds-aksb-a.akamaihd.net	unknown	unknown	false	high
img6.wsimg.com	unknown	unknown	false	high
www.adsensecustomsearchads.com	unknown	unknown	false	high
sso.afternic.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com	unknown	unknown	false	high
clients1.google.com	unknown	unknown	false	high
events.api.secureserver.net	unknown	unknown	false	high
www.afternic.com	unknown	unknown	false	high
ww38.dev-lti.bncollge.com	unknown	unknown	false	unknown
service.force.com	unknown	unknown	false	high
55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com	unknown	unknown	false	unknown
csp.secureserver.net	unknown	unknown	false	high
i66819100-ds-aksb-a.akamaihd.net	unknown	unknown	false	high
gui.secureserver.net	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://ww38.dev-lti.bncollge.com/	false		unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com/intake/v2/rum/events	false	Avira URL Cloud: safe	unknown
https://service.force.com/embeddedservice/5.0/esw.min.js	false		high
http://ww38.dev-lti.bncollge.com/track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D	false	Avira URL Cloud: safe	unknown
https://sso.afternic.com/login?iframe=true&hide_create_account=true&hide_federation_login=true&status=2&app=afternic-v2&path=%2F&port=	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
http://ww38.dev-lti.bncollge.com/	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lLirU0na9roYU3wDDisGJEVT	false		high
https://tags.tiqcdn.com/utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044	false		high
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false		high
https://unpkg.com/@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&gjid=2039886485&_gid=1786680911.1697146223&_u=6GDAAUABAAAAACABIg~&z=1932754328	false		high
https://www.google.com/recaptcha/api.js	false		high
http://c.parkingcrew.net/scripts/sale_form.js	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&_u=6GDAAUABAAAAACABIg~&z=564750678	false		high
https://www.afternic.com/forsale/bncollge.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_Above&traffic_type=TDFS&traffic_id=GDDY	false		high
https://www.afternic.com/forsale/true	false		high
about:blank	false		low
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=gpl/afternic/202203181533&cb=1697146221846	false		high
https://www.afternic.com/legal#privacy_policy	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
http://ww38.dev-lti.bncollge.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://ww38.dev-lti.bncollge.com/ls.php?t=65286552&token=b6682987fe9fb1fea8e96b18c4acb7ce6710a23b	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://dev-lti.bncollge.com/	false	Avira URL Cloud: safe	unknown
https://tags.tiqcdn.com/utag/gpl/afternic/prod/utag.js	false		high
https://www.google.com/adsense/domains/caf.js?abp=1	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/JakeChampion/polyfill-service.	chromecache_163.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_164.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_164.1.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_164.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__.	chromecache_164.1.dr	false	URL Reputation: safe	low
http://code.google.com/p/episodes/	chromecache_195.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_208.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_164.1.dr	false		high
https://cloud.google.com/contact	chromecache_164.1.dr	false		high
https://www.afternic.com/legal#privacy_policy	chromecache_165.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_164.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_208.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_252.1.dr, chromecache_164.1.dr	false		high
https://support.google.com/recaptcha	chromecache_164.1.dr	false		high
http://jedwatson.github.io/classnames	chromecache_257.1.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_195.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_164.1.dr	false		high
https://siteintercept.qualtrics.com	chromecache_244.1.dr	false		high
https://recaptcha.net	chromecache_164.1.dr	false	URL Reputation: safe	unknown
https://tagassistant.google.com/	chromecache_208.1.dr	false		high
https://siteintercept.qualtrics.com/dxjsmodule/	chromecache_244.1.dr	false		high
https://github.com/lancedikson/bowser	chromecache_179.1.dr	false		high
https://cct.google/taggy/agent.js	chromecache_137.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_164.1.dr	false		high
https://feross.org	chromecache_186.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_164.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_164.1.dr	false		high
https://www.google.com/ads/ga-audiences	chromecache_208.1.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_208.1.dr	false	URL Reputation: safe	low
https://td.doubleclick.net	chromecache_137.1.dr	false		high
https://s.qualtrics.com/spoke/all/jam	chromecache_244.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
103.224.182.240	dev-lti.bncollge.com	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	false
142.250.68.46	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.176.4	www.google.com	United States	15169	GOOGLEUS	false
142.250.101.154	unknown	United States	15169	GOOGLEUS	false
142.251.2.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
185.53.178.30	c.parkingcrew.net	Germany	61969	TEAMINTERNET-ASDE	false
104.16.124.175	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.72.141	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.188.228	unknown	United States	15169	GOOGLEUS	false
142.250.68.100	unknown	United States	15169	GOOGLEUS	false
13.248.148.254	034717.parkingcrew.net	United States	16509	AMAZON-02US	false
65.8.164.48	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.110.38.63	location.l.force.com	United States	14340	SALESFORCEUS	false
18.239.196.136	unknown	United States	16509	AMAZON-02US	false
52.85.39.16	d38psrni17bvxu.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.188.238	www3.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1324984
Start date and time:	2023-10-12 23:28:59 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dev-lti.bncollge.com
Analysis system description:	Windows 10 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/129@84/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.afternic.com/forsale/bncollge.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_Above&traffic_type=TDFS&traffic_id=GDDY Browse: https://www.afternic.com/forsale/true Browse: https://www.afternic.com/legal#privacy_policy

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.12.131, 34.104.35.123, 142.250.188.226, 142.251.40.35, 142.250.68.106, 172.217.12.138, 142.250.217.138, 142.250.176.10, 172.217.14.74, 142.251.40.42, 142.250.72.138, 142.250.189.10, 142.250.72.170, 142.250.188.234, 142.250.68.42, 142.250.189.3, 142.250.176.3, 8.252.72.254, 192.229.211.108, 23.206.229.208, 23.206.229.235, 23.43.51.229, 23.43.51.236, 23.206.188.10, 23.206.188.73, 173.222.162.55, 173.222.162.11, 104.106.41.211, 23.206.229.214, 23.206.229.216, 23.199.232.85, 23.199.232.75, 142.250.72.136, 172.217.12.142, 142.250.72.174, 142.250.68.3, 23.220.75.205, 23.220.75.200, 104.119.76.107, 184.30.170.194, 104.17.208.240, 104.17.209.240, 104.106.41.17, 142.250.68.74, 142.250.72.234, 172.217.14.106, 96.7.186.216
Excluded domains from analysis (whitelisted): e8843.dsca.akamaiedge.net, e40258.g.akamaiedge.net, slscr.update.microsoft.com, partner.googleadservices.com, e6225.a.akamaiedge.net, clientservices.googleapis.com, time.windows.com, ds-aksb-a.akamaihd.net.edgesuite.net, partner46.googleadservices.com, sso.afternic.com-v2.edgekey.net, ocsp.digicert.com, www.googletagmanager.com, e8843.dscx.akamaiedge.net, update.googleapis.com, www.gstatic.com, global-wildcard.wsimg.com.sni-only.edgekey.net, csp.secureserver.net.edgekey.net, afternic.com.sni-only.edgekey.net, www.google-analytics.com, fs.microsoft.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wildcard-sni-only.api.secureserver.net.edgekey.net, e126871.dsca.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, a1910.dscq.akamai.net, edgedl.me.gvt1.com, gui-ipv6.secureserver.net.edgekey.net, prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net, e64861.dsca.akamaiedge.net
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://dev-lti.bncollge.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (627), with no line terminators
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.751049232662301
Encrypted:	false
SSDEEP:	12:tWQvhRA7L+tGexVbA5i+spXtdW1GexVJn+6Ff:tWkhq+1VbQYpXuVJnZf
MD5:	1BD8614A7705DE4606C47DF62D5C5B24
SHA1:	D5F45F9C9363FDF8E4FD167314EB616975A2E6BB
SHA-256:	1D6116B7A9AE55F2A8B11828D88F25884E95CACE1F913B14FB58698B9F4360BA
SHA-512:	44B6302B251FE62D95CF180B92AF9BD52BAA7C455EBD211B5AEF7F6C5251D16D9A0EA6DD94E25B61ACF1FBB297226F0639E39D6603FEE2D381E4E21D5E8CA859
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/css/14a1dbcaec667fc5.css
Preview:	.sso-deck-iframe{width:100%;border:0;height:0}.sso-deck-wrapper{width:100%;height:0;position:relative;display:flex;flex-direction:row;justify-content:center;align-items:center;overflow:hidden;background-color:#fff}.sso-deck-wrapper.init,.sso-deck-wrapper.loading{transition:height .25s ease-out}.sso-deck-wrapper.init .sso-deck-overlay,.sso-deck-wrapper.loading .sso-deck-overlay{opacity:1}.sso-deck-overlay{background-color:#fff;top:0;bottom:0;left:0;right:0;position:absolute;display:flex;flex-direction:row;justify-content:center;align-items:center;opacity:0;pointer-events:none;transition:opacity .25s ease-out;z-index:200}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65467)
Category:	downloaded
Size (bytes):	616447
Entropy (8bit):	5.469926579549876
Encrypted:	false
SSDEEP:	6144:KtZD2aFErHxCOoy9c+yMi10w4E7EIJKpS3RkDZ2+4TK:K/D8oy9c+hiaw4LrpS3i
MD5:	70A6100203B702F8C9EBFE3F45184080
SHA1:	3BFBFF52A281E113EC0FA75C2A324BF05F5B9B4D
SHA-256:	3A44649358439EBD1F477C2FD16948CF0F40456BECD98CD4BD70F8579B3AEC03
SHA-512:	8BD757B1340002CC5B7683180BB50EF3C33D81D9A28A2E2804E7EC024CBBE5C25F834D69BB17BAF62590D10B47035CD4298BA2F9CD09FCDB709C377FABB22AC6
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/auth-assets/2a00497b6bd2fb10c963a7b795e7bb841e078e01/login-panel.js
Preview:	/! For license information please see login-panel.js.LICENSE.txt /.!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t(require("react"),require("react-dom"),require("prop-types"),require("@ux/alert").default,require("@ux/text").default,require("@ux/button").default,require("@ux/spinner").default,require("@ux/progress-bar").default,require("@ux/util").default,require("ux"),require("@ux/modal").default);else if("function"==typeof define&&define.amd)define(["react","react-dom","prop-types","@ux/alert","@ux/text","@ux/button","@ux/spinner","@ux/progress-bar","@ux/util","ux","@ux/modal"],t);else{var r="object"==typeof exports?t(require("react"),require("react-dom"),require("prop-types"),require("@ux/alert").default,require("@ux/text").default,require("@ux/button").default,require("@ux/spinner").default,require("@ux/progress-bar").default,require("@ux/util").default,require("ux"),require("@ux/modal").default):t(e.React,e.ReactDOM,e.PropTypes,e.ux.Alert,e.ux

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2952)
Category:	downloaded
Size (bytes):	175916
Entropy (8bit):	5.5327649293423535
Encrypted:	false
SSDEEP:	3072:LSToVvB9JuT2CBy+m0MvDcFLoLXgUnt7z3hUj7ZxWNr:u89ETsR6oLXgUtnevk
MD5:	D888F26CA129387392A5A2898AD8A90D
SHA1:	4568AFD43368D95FE29E7D67720BDFE5EE92176B
SHA-256:	07911C8F02AAA2C1DFD66287A8A4F02F191C42D6232605A02D7DC29951AFD457
SHA-512:	2C07B211BE165A63FEB826D69041DFD1C37661EE18C7CA1B255B1B93809878DF6F1E00F197601B7246B12BB4A9AB140F1BDA24F55AC41A24571D52311EAF2A38
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-115508484-1&l=_analyticsDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){return a.raw=a},da=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-bold.woff2
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	888
Entropy (8bit):	4.212446763958118
Encrypted:	false
SSDEEP:	24:tGNttGzFDu+IQNN6EfVazHwBNxwio+NabFBl3iQmLPyyQsYiIND9:fzFdIQ7nfVazHQwiPabrmLosYiaZ
MD5:	96206A3BAA78B49C9747CD9F5AEC3E31
SHA1:	E8F5CB66107966676B98722BAFF62855819D9033
SHA-256:	B4040E95722EB3CE418E418EDE6A6C0F8BBE0EB2702569E8F9912ECB76F5E027
SHA-512:	D82AC4E2F8A2F68AF44A1E957945987F2EB1CA7DD96875B4A37B08DA041FA5BAC6E895FAAEEC130FE31E992480AE0F3DE21EAC3175BE57C94EC221D3CACC780E
Malicious:	false
Reputation:	low
Preview:	<svg width="118" height="118" viewBox="0 0 118 118" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M92.99 104.36C94.65 104.54 96.3 103.98 97.55 102.88C109.79 92.11 117.52 76.34 117.52 58.76C117.52 48.69 114.99 39.22 110.52 30.94C110.44 30.8 110.37 30.66 110.29 30.52C109.97 29.93 109.63 29.35 109.28 28.77C109.13 28.52 108.98 28.27 108.83 28.02C98.49 11.21 79.93 0 58.75 0C50.31 0 42.29 1.79 35.04 5C60.48 8.06 83.08 26.28 83.08 26.28L93.93 17.46L90.13 64.57L55.13 50.7L67.42 40.11C52.73 20.69 38.3 13.46 25.99 11.98C24.37 11.79 22.75 12.29 21.5 13.33C8.37 24.11 0 40.45 0 58.76C0 67.57 1.94998 75.91 5.41998 83.41C7.38998 87.54 9.81001 91.46 12.6 95.09C23.36 108.74 40.03 117.51 58.76 117.51C67.99 117.51 76.71 115.38 84.48 111.59C57.68 108.99 33.59 89.46 33.59 89.46L22.33 98.51L26.33 50.08L62.33 64.37L49.69 75.27C65.08 95.65 80.18 103 92.99 104.36Z" fill="#00E356"/>.</svg>.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33459), with no line terminators
Category:	downloaded
Size (bytes):	33459
Entropy (8bit):	5.454439782711747
Encrypted:	false
SSDEEP:	768:shErs1eSmaN9iwSpnRwXpkOh9oaQ2vD308OF9jH8FPUtXOgfMqv5hZlh0wj7jnNl:rRwJWjrldrv1Rn
MD5:	6AB90A7CE0084E514B08464BD8C44DF7
SHA1:	EE3DB42CFB6DB985243A355ECBBA0C44000EE3A3
SHA-256:	46A13FFFADF4F2E229C6379108492AF36F0ED76C968B0026992DD43D4418FCF3
SHA-512:	F189EF2C8772ED0400CD8FC61EE1C96B1389BC69E56B078D95775369BBCA90D73DBE06D8E2FDEC0FDA5D2F669A554074BCBD5473E68678ECB9EFAF5D99A4FDB2
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/3222.de95a49debd81376.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3222],{50703:function(t,e,o){"use strict";var r=o(64836);Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var n=r(o(38416)),a=r(o(83899)),s=r(o(40189));function i(t,e){var o=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),o.push.apply(o,r)}return o}function c(t){for(var e=1;e<arguments.length;e++){var o=null!=arguments[e]?arguments[e]:{};e%2?i(Object(o),!0).forEach((function(e){(0,n.default)(t,e,o[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(o)):i(Object(o)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(o,e))}))}return t}const p=(0,o(75266).get_redirect_method)();class _ extends a.default.Component{constructor(t){super(t),this.state={hasError:!1}}componentDidCatch(t){this.setState({hasError:!0}),this.prop

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58454)
Category:	downloaded
Size (bytes):	58506
Entropy (8bit):	5.175109271749753
Encrypted:	false
SSDEEP:	768:5YVs7HSy2wqiBefd8CQUPL/0pu9zg2st4NCYm8etWt4+8:5YVqHSzU0ffGt5YmRti4
MD5:	0BE4C885D07E54ABB224234982B34FD7
SHA1:	82BA6A8B59F75A865BCC0CE7E242491156EAD595
SHA-256:	8D79C92638E9125038FB1FAAD3896558FEBEE2ED0C34F87E9D01C6F161999342
SHA-512:	24C61882F0C8665A6B121CC08829993235132630263D8A53DB50488B7F5FCA58B5389482D12D42F7291747C0A1E828EAC6ABB5995A278432E10FCF6039118EC4
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js
Preview:	!function(){var t={816:function(t,e,n){var r,i,a;!function(o,s){"use strict";i=[n(170)],void 0===(a="function"==typeof(r=function(t){var e=/(^\|@)\S+\:\d+/,n=/^\sat .(\S+\:\d+\|$native$)/m,r=/^(eval@)?(\[native code\])?$/;function i(t,e,n){if("function"==typeof Array.prototype.map)return t.map(e,n);for(var r=new Array(t.length),i=0;i<t.length;i++)r[i]=e.call(n,t[i]);return r}function a(t,e,n){if("function"==typeof Array.prototype.filter)return t.filter(e,n);for(var r=[],i=0;i<t.length;i++)e.call(n,t[i])&&r.push(t[i]);return r}return{parse:function(t){if(void 0!==t.stacktrace\|\|void 0!==t["opera#sourceloc"])return this.parseOpera(t);if(t.stack&&t.stack.match(n))return this.parseV8OrIE(t);if(t.stack)return this.parseFFOrSafari(t);throw new Error("Cannot parse given Error object")},extractLocation:function(t){if(-1===t.indexOf(":"))return[t];var e=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[]/g,""));return[e[1],e[2]\|\|void 0,e[3]\|\|void 0]},parseV8OrIE:function(e){return i(a(e.st

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Category:	downloaded
Size (bytes):	210244
Entropy (8bit):	5.17739272098389
Encrypted:	false
SSDEEP:	6144:E0e6e389yLFnxENM6HN26WO1z8ZuS09vGr+5:1l8ZuS09vGr+5
MD5:	4D86A474D330F31E36BC96778D08543E
SHA1:	6FA0D075FE7093C0512572A9A1EF87D1B66B4230
SHA-256:	DBD218ECDA2EB113DADDC917E913920FCAB604CF6A8E262D298E86257FDBBFDA
SHA-512:	94E203A5D413C0D99B1EFE45DDB3CD67AEC3439D5B568C89B4FFACE61D53667C3437E6E0F64D3E3FA37C0DF1B66307F22C21904E62E31D6F1C27E98CCE8E7959
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/b06c214621459306602eb4f0eda282c6/uxcore2.min.css
Preview:	:host,:root{--uxp-font-weight-normal:500;--uxp-font-weight-semibold:600;--uxp-font-weight-bold:700;--uxp-focus-visible-outline-color:var(--ux-wikx71,blue);--uxp-focus-visible-outline-width:3px;--uxp-focus-visible-outline-style:solid;--uxp-focus-visible-outline:var(--uxp-focus-visible-outline-width) var(--uxp-focus-visible-outline-style) var(--uxp-focus-visible-outline-color)}*,::after,::before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;-ms-overflow-style:scrollbar;-webkit-tap-highlight-color:transparent}article,aside,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}body{margin:0;font-family:var(--ux-1067ph9,sans-serif);font-size:var(--ux-vvspv2,1rem);font-weight:var(--ux-sm2he3,400);line-height:var(--ux-1w31hux,1.5);background-color:var(--ux-cao06b,#fff);color:var(--ux-1leynsm,#000);text-align:left;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body:not(.keyboard-n

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17715
Entropy (8bit):	3.8708550593179494
Encrypted:	false
SSDEEP:	384:THhGhWwFTFnl+kS0WG6twb+5sCAF/4kjwOs6CXsx:zhhwjHSvt8+mCAVjwOWXsx
MD5:	7EAD088DC2FC93A5098D22DF29E83A0F
SHA1:	BA24A2E3733E34E311FD68581CB846A1BB328F63
SHA-256:	AC6C986A8F5D8A4ED308AD3120B44FDA7F1AEF921C06D47B35DB4B1F9972654E
SHA-512:	2FEB717BFF42CAC6598D37A8114919BBDF0DDCC967EBAB4025E4BA0600B97AF5F098B0CB374233E4E75F5661FA28C85EFB814063E5AAA22B3E4D411CE71ABBF9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/private_label/497036/desktopLogo.7ead088dc2fc93a5098d22df29e83a0f.svg
Preview:	<svg width="191" height="24" viewBox="0 0 191 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M114.996 2.48927H114.704V21.5193H114.996V2.48927Z" fill="#111111"/>.<path d="M9.897 11.279C9.75107 10.7296 9.44206 10.1974 8.98712 9.69099C8.58369 9.25322 8.0515 8.90987 7.39914 8.66953C6.75536 8.43777 5.96566 8.3176 5.03004 8.3176C4.27468 8.3176 3.54506 8.37768 2.86695 8.50644C2.20601 8.62661 1.6824 8.74678 1.32189 8.87554L1.09013 8.96137L1.12446 9.20172L1.45923 11.3991L1.51073 11.7597L1.85408 11.6395C2.17167 11.5279 2.57511 11.4249 3.07296 11.3391C3.5794 11.2532 4.14592 11.2103 4.7382 11.2103C5.1588 11.2103 5.49356 11.2618 5.77682 11.3648C6.01717 11.4592 6.19743 11.588 6.3691 11.7854C6.51502 11.9571 6.57511 12.1631 6.64378 12.4206C6.67811 12.5579 6.66953 12.721 6.65236 12.9099C6.64378 13.0215 6.63519 13.133 6.63519 13.2446V13.2876C6.48927 13.2618 6.30901 13.2446 6.11159 13.2189L6.02575 13.2103C5.67382 13.1674 5.46781 13.1502 5.1588 13.1502C4.49785 13.1502 3.85408 13.2189 3.24464

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=9331bdd1bf3f5218aead333d16b735cd&timestamp=1697152221738&corrid=563228417&privatelabelid=497036&vs=visible&rand=2106882303&sitename=www.afternic.com&page=%2Flegal&location=https%3A%2F%2Fwww.afternic.com%2Flegal&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-166.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=1280&browy=907&resx=1280&resy=1024&cdepth=24&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=5&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&hit_id=cc8af583-4ebe-575c-81db-c3c100d2e9a0&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6967), with no line terminators
Category:	downloaded
Size (bytes):	6967
Entropy (8bit):	5.063594539292183
Encrypted:	false
SSDEEP:	192:D292l2Tm2biO2QI2J2ngc2K2Yl2lXTmbD21t721h21R21vf21821Wv21b4n2BU2u:D292l2Tm2biO2QI2J2ngc2K2W4XTmbDt
MD5:	3A7B0F0B65FB2CA2E39D8CBB1B71AFEF
SHA1:	7D6C7664C8A4C0943345495BF13402E2A678A274
SHA-256:	29B0970919ADAC386E4B2DE7C70145D7F6BABE565904622180C83AC38081AA65
SHA-512:	FD33932B10E380300899A7654E47B4CE9D40CE7A10C8380637FE302C10A5D63270BA6C04E497D96701445AF254294FC435771D16C7C2856F20312D78A9A0FE8A
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/3.32.0/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(a,s,e,c,t,n,i,d,o,r,u,l,f,p,g,h,m,b,k,j,y,_,v,I,N,B,C){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-8efb118173906482.js"],"/account/federate":[a,s,e,"static/chunks/pages/account/federate-710fa2262d7b0c61.js"],"/account/lander":[a,s,e,"static/chunks/pages/account/lander-e4651561cf652e67.js"],"/account/oauth":[a,s,e,"static/chunks/pages/account/oauth-845f92759675a028.js"],"/account/oauth/tokens":[a,c,n,i,s,e,"static/chunks/pages/account/oauth/tokens-d996bf332c4b141c.js"],"/account/ownership":[a,s,e,"static/chunks/pages/account/ownership-75441a44c9b4dcd1.js"],"/account/payments":[a,t,o,s,e,"static/chunks/pages/account/payments-f4779dff9cd14faf.js"],"/account/privacy":[a,s,e,"static/chunks/pages/account/privacy-12678504bc952201.js"],"/account/profile":[a,c,t,n,i,o,_,"static/chunks/577-5432a292cd19cf04.js",s,v,e,"static/chunks/pages/account/profile-a12d54824a784963.js"],"/account/profile/create":[a,t,o,_,s

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (790), with no line terminators
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	5.354900620191434
Encrypted:	false
SSDEEP:	12:ZaYmBGmFMZq/zY8hRqR8hvy2DjuF30aF9WscsFXjV:Z/mUcMULrDv5DjuFk49CsFV
MD5:	0743F0F04912FA9A6B229D9AF4AA3EDB
SHA1:	025940904D1185832B09652B5C56C7C82EAD8868
SHA-256:	DA89009F42EB21799C84BC71C8958469B1601407BF4DCBDBD8316B154EF5A724
SHA-512:	228C1398DBC788F56FF0E9D308179FA87109AF52ED2A120BFD92C7E52534FBBFD55D6E6EBFCBBFFD482C3B7C4E8CABBEF458F324F837BE9A0EDAAFC5985F4E5D
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/2.41.0/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(s,a,c){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-0fdef55496604dc2.js"],"/forsale":["static/chunks/pages/forsale-bc9176fe22dece50.js"],"/forsale/inquiry/[id]/survey":[s,a,c,"static/css/897810817a82cd2c.css","static/chunks/pages/forsale/inquiry/[id]/survey-7564419d2406089b.js"],"/forsale/[domain]":[s,a,"static/chunks/10-b3c12038beb271f3.js",c,"static/css/2d63e62d9b4ba5ee.css","static/chunks/pages/forsale/[domain]-72b1bac5c056e11b.js"],sortedPages:["/_app","/_error","/forsale","/forsale/inquiry/[id]/survey","/forsale/[domain]"]}}("static/css/6fafb289fc414ef8.css","static/chunks/522-f9b6103fe2465caa.js","static/chunks/694-a28bf25fac5d7af4.js"),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/pageEvents.aspx?timestamp=1697146260434&corrid=711808553&referrer=&privatelabelid=497036&vs=visible&rand=793421681&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Ftrue&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.event&usrin=domain%2Ctrue&eventdate=2023-10-12T21%3A31%3A00.434Z&eventtype=impression&e_id=am.tdfs.intake.maybe_forsale.impression&event_label=true&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=4&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=f7fb5af606ac799ab1cf0b5647845fe9&hit_id=b2b09734-9da4-5169-8224-79a247a84265
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	30813
Entropy (8bit):	5.163195557334805
Encrypted:	false
SSDEEP:	768:UHm6hM55xzjzHGkehRitzfwGY6/tWXveCF6o6ILzJDC8LlEHlm:SMHGkeTm+6/4UOcBHw
MD5:	E42DF024FAD660BBADF4D550BB33FE6D
SHA1:	0C73CF3E830F5FFED5C9D070A95D98883DB23454
SHA-256:	EF4DCC4DAB4D780F44939C455D4720CAB662B2F5FABC36EBC33A21F4CDBECD4E
SHA-512:	193AB01FB92FBFC0BFF58D018D2F2AC64850A29D0EB47283370B0A872D71C1B00636FB2A8BC0F79F0CB906457061AA869BC291F69E3B6703EA08A04E922596EA
Malicious:	false
Reputation:	low
URL:	https://service.force.com/embeddedservice/5.0/esw.min.js
Preview:	/. Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. ./.(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,displayHelpButton:!0,isExternalPage:!0,devMode:!1,targetElement:document.body,elementForOnlineDisplay:void 0,elementForOfflineDisplay:void 0,defaultMinimizedText:"",disabledMinimizedText:"",defaultAssistiveText:"",loadingText:"Loading",showIcon:void 0,enabledFeatures:[],entryFeature:"FieldService",storageDomain:document.domain,language:void 0,linkAction:{feature:void 0,name:void 0,valid:!1},linkActionParameters:{},useCustomAuthentication:!1,.allowGuestUsers:!1,requireSLDS:!1,hasBottomTabBar:!1};this.auth={};this.validLinkActions={};this.alwaysWarnOnBeforeUnload=!1;Object.defineProperty(this.auth,"oauthToken",{get:function(){return b},set:function(c){this.validateHeaderValue(c)?(b=c)?(this.setSessionData("ESW_OAUTH_TOKEN",c),this.checkAuthenti

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 17462
Category:	downloaded
Size (bytes):	6076
Entropy (8bit):	7.967265718311696
Encrypted:	false
SSDEEP:	96:vl8SCROdtzgnAofiSS2kbjB+sJNcZcGJ71XxPR2BvzC2vxPVsMhsRVQa0f5yh7I5:98XOdtzgvKxrjXNcq4ZBPovRx2UVaKf5
MD5:	9B131E3B5CA9EA512E67F0A9ACEFF757
SHA1:	5767574B64723A6253BA59DE74A57BBCD2D79F1C
SHA-256:	EA3D2398A892708167AD39A4E2F9000636D8789C388159A6C99FB5BE8D6099C6
SHA-512:	4B46F5F72E37FC93ECD415CCF4729DF4F7A99463BC5D74F0D6AD3B50C826456CCBA6A1877CE9CDE4AC696BA944C3D508468C26919C604E6EE4FCD87C51BF100A
Malicious:	false
Reputation:	low
URL:	http://ww38.dev-lti.bncollge.com/
Preview:	...........\.{...\...y....c...bc;v..m.....#..d.D%a.9...ovW....i...........Yu.M...s..H..#g.e..4....au.....\...........t.d...G......1.j..4>.>i..un/..{.\.]..<:.ln...O...5_..n}......Y..y.}f...[...Y...~.?...1..V.{...R.:lL....].07......;..vn[W....W.O..t...........W.8....\|..7..&.'F.f..7....s;.}b...Ga_.3.l.....x.T.N..i....Re{{.4...@;.....s3Z.............1......I..zn....YF3....,,...90....$...2%u"..1=.d....Ce...n.'.d....l..m.)...0....o..B..zv..^<wh.....8}V4..^I..&..............!K..07`%......L.W\|....^.....}..A8w.6b.m..t0...J....C..~Y...K.0.}...6.\.T.j[..w..f.i6)..7.z>.......%>MP....v/...^.gcf...Eg.../\|uv.Jm<....A..*...`....,.c....}w..Jd.o"..O...o"...Od`...;$..e.n..K1l..h...8.4B....C../..l..Z.3....0C...n....L........:aN...w4._F.....o.;e..A..j9&[...s,....Z...X..W....o.Gc.x.`....J.T...u4RY..Z..^.....h[.e...,)..X.....S...a... ....=.v4..0..,...S'.........A.\|...e.y...@a.m.\1k..\|`.&_..#...........f..4...QF.N.\|P`?....FB..\|. ...5..,f$..9.tg`[.s....?...

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25817), with no line terminators
Category:	downloaded
Size (bytes):	25817
Entropy (8bit):	5.087418713954393
Encrypted:	false
SSDEEP:	192:yPc5C60rdwnI+56vH/0QgPnSe4S53RP5Z4l10XYHlMYxOxyWRff4ZRFe6Ro7332d:0YQJqJnR4OImYxOxyGf4hSbmzGtLoBj
MD5:	FE0608DE1D1D6E152AE49C952BFD0A01
SHA1:	5258AB34309BBFA47C4D7BA76E6EAD33BFDABAE3
SHA-256:	CF9338B6D1B01CC32F5DDB30F24464F3D01E4E17B69416A722DC67833E24852A
SHA-512:	F8FDB5BAF8E40C89447D927BE3DF5A12403BBED2C791BB3F8731254C0323B7889283CE68D0A9E8174194B68A741AC230CA6D03401B18CC2A846E09EC6D2FCCEB
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/css/72189c434a07c009.css
Preview:	.ux-text{--uxText--fontSize0:var(--ux-1a61xr7,var(--ux-vvspv2,1rem));--uxText--fontSize-1:calc(var(--uxText--fontSize0) var(--ux-ol0703, /) var(--ux-7s4p3v, 1.125));--uxText--fontSize-2:calc(var(--uxText--fontSize-1) var(--ux-ol0703, /) var(--ux-7s4p3v, 1.125));--uxText--fontSize1:calc(var(--uxText--fontSize0) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize2:calc(var(--uxText--fontSize1) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize3:calc(var(--uxText--fontSize2) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize4:calc(var(--uxText--fontSize3) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize5:calc(var(--uxText--fontSize4) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--lineHeight:calc(var(--ux-14t1fes, var(--ux-1w31hux, 1.5)) var(--ux-1u3f284, ) var(--ux-51yj5o, 1));font-size:var(--uxText--fontSize0);line-height:var(--uxText--lineHeight);font-family:var(--ux-9pe28g,var(--ux-1067ph9,sans-serif));font-weight:var(--ux-v

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.dev-lti.bncollge.com/track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D
Preview:	....................

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.456747562960809
Encrypted:	false
SSDEEP:	3:GMyoSbcpnOEyHPltTbI:jFSbY5yvXbI
MD5:	F2ACCE0370531ADD8151008CCBB3DFB3
SHA1:	CE93411B0E61A04980F8D4A3FAEE012212FD480F
SHA-256:	CF9239CC7F1229B36003BA80F6FFB074EE40A1E438ABD99C5FA2967F152777B6
SHA-512:	D5FAC91A4E16EBCF186563539A814B28DDE7550292BF15EF2D7811F6A1E586525550FFF4110D4CE77FCBEC6DCF7A425315760FEA81C5AF5E7D81D7C8A7B89E23
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwl1km8aNUl-MxIFDeeNQA4SBQ3OQUx6EhcJrAvchuJGkyYSBQ3njUAOEgUNzkFMeg==?alt=proto
Preview:	ChIKBw3njUAOGgAKBw3OQUx6GgAKGgoLDeeNQA4aBAhWGAIKCw3OQUx6GgQISxgC

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	183929
Entropy (8bit):	5.255905711470262
Encrypted:	false
SSDEEP:	1536:Lxin0G22mjfLed8QOdERaNl1Gk+1rzX+x/ZH8gI67vfKqjia7z6xWW1VPKsPJZNJ:LQnhkfq8QObl1G7MQKsPnNg3fZSLuur
MD5:	5694CFA95C0D1D5451971448265D63A3
SHA1:	3BBD5016CD93E4ED8B3263DDFADB52FD16187B9B
SHA-256:	96127EC4F28F4B5A0190B29F788E3EF9AAB4695872FA040420AA4A75F9BC8DF2
SHA-512:	63740ACFCA10E389DA958CC7B8A82FAE0F70E09CBD7DE3517DD41EEA37155888B62101785CBC9B65778C54ADFCB8D8087D5EB92FF64D80F438BBAD444A5A8397
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/css/dc6d9a0fe738089b.css
Preview:	{--uxp-icon-chat:url("data:image/svg+xml;utf-8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'><path d='M21 21.75a.753.753 0 00.75-.75V6A3.755 3.755 0 0018 2.25H5.996A3.75 3.75 0 002.25 5.997v7.307a3.75 3.75 0 003.747 3.746h9.992l4.48 4.48c.14.14.334.22.531.22zm-3-18A2.253 2.253 0 0120.25 6v13.19l-3.42-3.42a.75.75 0 00-.53-.22H5.997a2.249 2.249 0 01-2.247-2.246V5.997A2.25 2.25 0 015.997 3.75z'/></svg>")}.uxicon-chat:before{content:var(--uxp-icon-chat)}{--uxp-icon-currency:url("data:image/svg+xml;utf-8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'><g><path d='M19.942 4.091H4.058A2.81 2.81 0 001.25 6.898v9.219a2.81 2.81 0 002.808 2.808h15.884a2.81 2.81 0 002.808-2.808V6.898a2.811 2.811 0 00-2.808-2.807zm.947 9.231a3.966 3.966 0 00-4.083 3.826v.276H7.194v-.276a3.966 3.966 0 00-4.083-3.826H2.75V9.694h.361a3.966 3.966 0 004.083-3.828v-.275h9.612v.275a3.966 3.966 0 004.083 3.828h.361v3.628zm.361-6.424v1.295h-.361a2.468 2.468 0 01-2.583-2.327v-.275h1.636a1.309 1.30

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	100118
Entropy (8bit):	5.285720818724932
Encrypted:	false
SSDEEP:	1536:+AYTrVYXwoM/TfyToj42tMmqpnpvv3y8IHtcuXw:+YeNMmqpVNuA
MD5:	7F251866C5E89285A0B3A83AB4A7172B
SHA1:	A34DD89F2FDB5D236379418E6042C6B257E8AC18
SHA-256:	3A1484C1456F2A702B1F3A34C0C55A48C2013740A3B643081178044BEDEF6B51
SHA-512:	33646F84C460E65A816790552377D4F3B94CB2F2CF126E02F6C939F87B4FBA62590FBE7D2FB611AD3BE77CBDED6D764675D5650574B82E2AA7C651A50B52C8D6
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/main-5129ddcc35686456.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("react"),require("react-dom")):"function"===typeof define&&define.amd?define(["react","react-dom"],t):"object"===typeof exports?exports._N_E=t(require("react"),require("react-dom")):e._N_E=t(e.React,e.ReactDOM)}(self,(function(e,t){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var u=e[o](i),c=u.value}catch(s){return void r(s)}u.done?t(c):Promise.resolve(c).then(n,a)}t.Z=function(e){return function(){var t=this,n=arguments;return new Promise((function(a,o){var i=e.apply(t,n);function u(e){r(i,a,o,u,c,"next",e)}function c(e){r(i,a,o,u,c,"throw",e)}u(void 0)}))}}},6495:function(e,t){"use strict";function r(){return r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.Z=function(){r

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2828)
Category:	downloaded
Size (bytes):	383222
Entropy (8bit):	5.142517533436873
Encrypted:	false
SSDEEP:	3072:Kq0KcpM5qmpGFf8HNI1YiAfwJHY+d7ljMkhpxYUzxYU/xlUs+SpujH00yVBDVDc6:diAfwJ063idxqplic/N1
MD5:	1A3F03E6C92AE470753C3117A70508EF
SHA1:	84E2FAAE63DB22D21628D42C4BF07E5066CABD40
SHA-256:	AD552B4B444C26F2AFCFDDF61F375E07187BA8A444C12BEAFBD3C40559E492DB
SHA-512:	C1887F68C90216FF51D2945AF67EEED679B234A56D9677C04D6F31DF14A4888991093C839B09C7C1F42F94BB76B72C7E2C209907560C0C10131AA817CE8E10A0
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs-next/1a3f03e6c92ae470753c3117a70508ef/application-sidebar.css
Preview:	{--uxp-icon-circle-filled:url("data:image/svg+xml;utf-8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'><path d='M12 2.25A9.75 9.75 0 1021.75 12 9.761 9.761 0 0012 2.25z'/></svg>");}...uxicon-circle-filled:before{content:var(--uxp-icon-circle-filled)}..{--uxp-icon-checkmark:url("data:image/svg+xml;utf-8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'><path d='M9 18.25a.748.748 0 01-.53-.22l-5-5a.75.75 0 011.06-1.06L9 16.44 19.47 5.97a.75.75 0 011.06 1.06l-11 11a.748.748 0 01-.53.22z'/></svg>");}...uxicon-checkmark:before{content:var(--uxp-icon-checkmark)}..*{--uxp-icon-information:url("data:image/svg+xml;utf-8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'><g><path d='M12 2.258a9.75 9.75 0 109.75 9.75A9.761 9.761 0 0012 2.257zm0 18a8.25 8.25 0 118.25-8.25 8.26 8.26 0 01-8.25 8.25z'/><path d='M12 11.258a.75.75 0 00-.75.75v5a.75.75 0 101.5 0v-5a.75.75 0 00-.75-.75zm-.003-4.125a1.125 1.125 0 10.003 0z'/></g></svg>");}...uxicon-information:before{cont

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=50cdadc00a0d71d7af2e9485f616385a&traced=1&timestamp=1697146218889&corrid=2100105272&privatelabelid=497036&vs=visible&rand=2011736664&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=1280&browy=907&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&virtual_path=%2Fforsale&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=2&has_consent=0&cv=3.46.21&client_name=tcc&same_site=None&hit_id=a1f28a4f-ee88-514e-bddf-aabaa06cac6c&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/pageEvents.aspx?timestamp=1697152225330&corrid=563228417&referrer=&privatelabelid=497036&vs=visible&rand=350539445&sitename=www.afternic.com&page=%2Flegal&location=https%3A%2F%2Fwww.afternic.com%2Flegal&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-166.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.event&eventdate=2023-10-12T23%3A10%3A25.331Z&eventtype=impression&absolutex=0&absolutey=0&relativex=0&relativey=0&e_id=am.fos.portfolio_v2.aa_on.view&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=5&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=9331bdd1bf3f5218aead333d16b735cd&hit_id=e3cfa4a7-cc17-5dc2-a899-62b30dc5f560
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8954), with no line terminators
Category:	downloaded
Size (bytes):	8954
Entropy (8bit):	5.455514264596079
Encrypted:	false
SSDEEP:	192:YUoU9U7UTUHUpUSUlUYLUbUnTcHpuRsdHsTsAsNisN9sgsOusFsdszs2sBTsEks8:YUoU9U7UTUHUpUSUlUYLUbUnTcHpuRsd
MD5:	87CC56F08779148EFA5C22A3E13C42BB
SHA1:	BAF73FE5B0E6F97BC5346A37C3367363B307EE02
SHA-256:	34B7E11C07E6915813A21A857B73CE64B5D7076D86D9522BAE7E8B5C20213A15
SHA-512:	EF32C64FD0547E6D5AED465931DE60CC9E21151309AC72B4E80DFB102F22ACCAAE872B25AFC87B91F93708DE233B8FD930C4C8A6DCB2F5D0455287DC5101E2A0
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/css/2d63e62d9b4ba5ee.css
Preview:	@keyframes BuyNowActionBox_reveal__o36W6{0%{opacity:0}50%{opacity:1}}.BuyNowActionBox_action-box__Odi2Y{animation:reveal 1s ease-out;font-size:18px;font-weight:440;line-height:22px;padding:30px 45px}.BuyNowActionBox_action-box__Odi2Y .currency{text-transform:uppercase;font-size:12px;padding-right:5px}.BuyNowActionBox_action-box__Odi2Y .price{color:#09757a;white-space:nowrap}.BuyNowActionBox_action-box__Odi2Y h4{text-align:left}.BuyNowActionBox_action-box__Odi2Y dl{display:flex;justify-content:space-between;margin-top:25px;margin-bottom:0}.BuyNowActionBox_action-box__Odi2Y dl dt{font-weight:440;width:70%;text-align:left;white-space:nowrap}.BuyNowActionBox_action-box__Odi2Y dl dd{display:flex;flex-direction:row;width:20%;justify-content:flex-end;white-space:nowrap}.BuyNowActionBox_action-box__Odi2Y dl.pay-over-time dt{color:#767676}.BuyNowActionBox_action-box__Odi2Y dl.pay-over-time dd.notice{font-size:14px}.BuyNowActionBox_action-box__Odi2Y .buy-now{margin-top:25px;min-width:100%}@media

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	4.665251858985982
Encrypted:	false
SSDEEP:	6:UXQJjTWWRmNeIHSUK/MKqHVY2KPxwLPDzRhHFnQBrFL4WsRRoh:UX/euKjJ2KSLbzRlFnQ5xl/h
MD5:	020849F4B1EB48D459058CFDC436DDB6
SHA1:	B226DAEF4A62A27791634CE70BEAD9246232D32D
SHA-256:	63071F964967665B9AC9D57D2B59DB4521329E333F3D4ED2414E4BA45A01AB81
SHA-512:	D2AE9420D292493085A9598D7AE4D60541311F7895BEB1C5C513A54BD296F649EC380AFA3BCE8E5E8EC33A6DD03CA8EBEA589EF55773AEA3F23A2A8FEBAEB358
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/poly/v3/polyfill.js?features=,Intl.Locale&rum=0&unknown=polyfill&flags=gated"
Preview:	/* Polyfill service v3.111.0. * For detailed credits and licence information see https://github.com/JakeChampion/polyfill-service.. * . * Features requested: Intl.Locale. * /.../ No polyfills needed for current settings and browser */..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (621)
Category:	downloaded
Size (bytes):	475029
Entropy (8bit):	5.690672194438732
Encrypted:	false
SSDEEP:	6144:TWhcrarjmmhsWrfMw4lZuoTalhRVEIOjBfuMebPcbpGFW:PaL14lLalhAIMfuvPWV
MD5:	D0F24857A83615487E11B16804AB8829
SHA1:	3007FC0BFD11D1A3DE214C780F62E1C429208002
SHA-256:	B1A65063717196413801187164CAD067A3C8B3F1C8D7CF768DE32D1230ECDF3C
SHA-512:	A33751CF503270ADB7DED0E3A8F1E35327FB4799BFB8C5A94235E012F5336E8A333912C36BFB43EA34985A979C118AEC092D7BDC5C37199D2BED963B90BB3FBA
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(P,l,f,U,Q,Y,h,d,k){if((d=["X","innerHTML",3],1==(P>>2&7))&&(U=e[40](18,f),Pf&&void 0!==l.cssText?l.cssText=U:b.trustedTypes?S[10](30,U,l):l[d[1]]=U),1==(P>>1&11)){if(f.size!=f[d[0]].length){for(U=h=l;h<f[d[0]].length;)Y=f[d[0]][h],w[16](1,f.Z,Y)&&(f[d[0]][U++]=Y),h++;f[d[0]].length=U}if(f.size!=f[d[0]].length){for(h=(Q={},l),U=l;h<f[d[0]].length;)Y=f[d[0]][h],w[16](2,Q,Y)\|\|(f[d[0]][U++]=Y,Q[Y]=1),h++;f[d[0]].length=U}}return 1==(P\|6)>>d[2]&&(this.errorCode=l),k},function(P,.l,f,U,Q,Y,h,d,k,N,L,G,y,O,M,n,T,q,W,m,c){if((P+6&58)>=((P&(4>((P^77)&(((c=[12,"toString","S$"],P+7>>1)>=P&&(P+5&51)<P&&(W=[null,"v"

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (26649)
Category:	downloaded
Size (bytes):	67079
Entropy (8bit):	5.63074703231557
Encrypted:	false
SSDEEP:	1536:a9HwCp52x8VTt4ttkZOxDsOnbVlZKCncKHchvMGtbIvJ5i:aux5VbboH
MD5:	825E3FE10A7F4EFA6EA872FE1FD2A2A4
SHA1:	F719B540FB85D825A074DEA9E716BF036FBC0870
SHA-256:	397F5299BEFDE44B4D118C095FD4D1BF6FA16AAEB3ACE275D028A93848DCFE05
SHA-512:	589DC482BEBC82BFFB85F6B484DE68E64068F91B941C01E64F58EDE6F9B9D1BEF33E2EB5C31F46004A2D2006F92FB250C978D69DAEDCFEE20CFC88D17AC4D255
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/gpl/afternic/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202203181533, Copyright 2022 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"gpl.afternic",o:{},sender:{},send:{},rpt:{ts:{a:new Date()}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{"pending":0},run_ready_q:function(){for(var i=0;i<utag.loader.ready_q.length;i++){utag.DB("READY_Q:"+i);try{utag.loader.ready_q[i]()}catch(e){utag.DB(e)};}},lh:function(a,b,c){a=""+location.hostname;b=a.split(".");c=(/\.co\.\|\.com\.\|\.org\.\|\.edu\.\|\.net\.\|\.asn\.\|\...\.jp$/.test(a))?3:2;return b.splice(b.length-c,c).join(".");},WQ:function(a,b,c,d,g){utag.DB('WQ:'+utag.loader.wq.length);try{if(utag.udoname&&utag.udoname.indexOf(".")<0){utag.ut.merge(utag.data,window[utag.udoname],0);}.if(utag.cfg.load_rules_at_wait){utag.handler.LR(utag.data);}}catch(e){utag.DB(e)};d=0;g=[];for(a=0;a<utag.lo

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/b.aspx?timestamp=1697146260294&corrid=711808553&referrer=&privatelabelid=497036&vs=visible&rand=422266607&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Ftrue&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.log&eventdate=2023-10-12T21%3A31%3A00.294Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1697146258980&connectStart=1697146258441&domComplete=1697146260278&domContentLoadedEventEnd=1697146260236&domContentLoadedEventStart=1697146260236&domInteractive=1697146260172&domLoading=1697146259762&domainLookupEnd=1697146258441&domainLookupStart=1697146258441&fetchStart=1697146258425&navigationStart=1697146258422&requestStart=1697146258980&responseEnd=1697146260169&responseStart=1697146259754&loadEventStart=1697146260280&loadEventEnd=0&transferSize=102407&encodedBodySize=102107&decodedBodySize=102107&navigationType=navigate&marks=&measures=Next.js-before-hydration%2C1775%5ENext.js-hydration%2C19&fp=1547&fcp=1547&lcp=1547&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=4&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=f7fb5af606ac799ab1cf0b5647845fe9&hit_id=6525b0dd-1cf8-51d9-a930-034fb1fbdb94
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-vf.woff2
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65458)
Category:	downloaded
Size (bytes):	688383
Entropy (8bit):	5.471834918010338
Encrypted:	false
SSDEEP:	12288:I2vqLkfjTsjqosRu1Sj4Qx3ZKVoPXxPcb2epMwFX4N+K/:tSLkfjZosRu1g4Qx3ZKVo/o2epM2X4Nn
MD5:	B7A9D08DE442162C6425702F229A60E6
SHA1:	C25540F641615AE132EF970FF1AFDB6ACF613CDB
SHA-256:	214D0210320BAB800DAD049C83E1D10EA32836821E282E25E218175283D6E31E
SHA-512:	4038B089FF07CCF2D551AFFCEF9E92D81058F275618600ACAA1DF2D7CCCFE8D2884F2304FFDFB575D97DB910D6ADDF0F7B0D980E0CD805A73AB46A734EF2E409
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs-next/b7a9d08de442162c6425702f229a60e6/application-sidebar.js
Preview:	/! For license information please see application-sidebar.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("prop-types"),require("react"),require("react-dom"),require("@ux/button").default,require("@ux/growl").default,require("@ux/modal").default,require("react-focus-lock").default,require("@ux/spinner").default,require("@ux/text").default,require("react-intl").default,require("@ux/util").default):"function"==typeof define&&define.amd?define("HCS",["prop-types","react","react-dom","@ux/button","@ux/growl","@ux/modal","react-focus-lock","@ux/spinner","@ux/text","react-intl","@ux/util"],t):"object"==typeof exports?exports.HCS=t(require("prop-types"),require("react"),require("react-dom"),require("@ux/button").default,require("@ux/growl").default,require("@ux/modal").default,require("react-focus-lock").default,require("@ux/spinner").default,require("@ux/text").default,require("react-intl").default,require("@ux/util").default):e.HC

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (788), with no line terminators
Category:	downloaded
Size (bytes):	788
Entropy (8bit):	5.527184455013918
Encrypted:	false
SSDEEP:	12:+dbjqkjvdvpqZyjvqFLouXJOd+038QrurfwKAB8MTcQVkWdtqnK6aWXlOjZUmo:ibjLjFvEZPcR7uzoB8f4k6tqn5lOjFo
MD5:	CDC697236DAD987DFF75AF8550C3122C
SHA1:	208354325CA39C113BC60E0526E4503C9AB5EC16
SHA-256:	2149F792E86E5E6441EFEC9A9431C9CBC4384C462E04BD1507D92B40F3E0D4E9
SHA-512:	4191EEFB9A6577675970CD5BBAF3599764CD7752E29003DBD0C7DE4C9C55AB802054C3AA541665998EB4F8DF48E62A39386C92D275164121ABDA4C132AC35B17
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/framework-07adfa52c47e9281.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{75251:function(e,r,o){o(96086);var t=o(83899),n=60103;if(r.Fragment=60107,"function"===typeof Symbol&&Symbol.for){var f=Symbol.for;n=f("react.element"),r.Fragment=f("react.fragment")}var _=t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner,a=Object.prototype.hasOwnProperty,s={key:!0,ref:!0,__self:!0,__source:!0};function u(e,r,o){var t,f={},u=null,l=null;for(t in void 0!==o&&(u=""+o),void 0!==r.key&&(u=""+r.key),void 0!==r.ref&&(l=r.ref),r)a.call(r,t)&&!s.hasOwnProperty(t)&&(f[t]=r[t]);if(e&&e.defaultProps)for(t in r=e.defaultProps)void 0===f[t]&&(f[t]=r[t]);return{$$typeof:n,type:e,key:u,ref:l,props:f,_owner:_.current}}r.jsx=u,r.jsxs=u},85893:function(e,r,o){e.exports=o(75251)}}]);

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 103552, version 1.0
Category:	downloaded
Size (bytes):	103552
Entropy (8bit):	7.997774786979454
Encrypted:	true
SSDEEP:	3072:PvGH9m3up7yAtjCtB6QzFoPdlocYTIfZ8HWBUWs1Oiauu7:PuHDpOfEQ+PdlotwZ8HJzi7
MD5:	2EE4320BB6AD9EE172CD46F3F841EA69
SHA1:	1F4865D6326E705F49EC88620275FA278A866B5D
SHA-256:	9DD3D6656E7897C8C82C3C6423BD95108C05F8DB925710832C5B18689C3DAD16
SHA-512:	7247AFF1D4168076DCA642883CFC83F4022C0F955970D7013DED83001C10EC64EA7092ECD43D5B0FBD1B8EB15712E4BFF11F6C432971D642DCFB78FF548ED6CF
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-vf3.woff2
Preview:	wOF2..............(...............................8...p..$?HVAR.h?MVAR.F.`?STAT$'8.../.H...T..=....0..r.6.$..0. ..6...[......y..\....h[VvJT.?.h.l.$...1)?..6;F8...W.w..mz.@w@............./Y....... .".`.y5y.(\|0D%.zQ..y0.b.PG.Fz...)...W....b>x.&<..{...)Q..U..D.<H.+.l.....;..)I...l..>XX,`..E.".}XxX6D...b}P"b6GY...u.....bI%&..6...Y\.v..^.p\.p.;y.WH...p.^1..0...1..x.Y..1....1y.]v.A0.]{.s%..R.X8'.CM.....+.......<.U.....+..s..........o.7..E...M.,P.J...C=..QY..^.T...D5Q$.Z...?3.2..7l<.^v......-.)<.k.....}.F.WUEbh...^...R33Wcf...Kt2I.?uT,.0%..N.U...mj.0...r/b%..^y..F...G.H.Ds8.....]".o... .4XiT.......Xj.5.....Z~2.L.M66C..rq...-..9..c6K.`......^.n..T.t..\|..'.\|..N.).t.P...eus.A....Q.l..7%..1..y.8n/.)........N./'...X..,.Y.<...vO.C.....x..`............{[.f.1..H..`.....3(.Q1....).E...?P0.#??......?.e.Y..,2SL!l.I....v.4.!.....J....7..\|"At...#.R.N-._..S...]?......[R......h2Vr...;.<N..\.)q......GBY........Q...p....i.....9X8..5E*......@.....oX...l...W3..5..wj~K.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48586), with no line terminators
Category:	downloaded
Size (bytes):	48586
Entropy (8bit):	5.181940492084399
Encrypted:	false
SSDEEP:	768:xrH3oJvsOL5XcPPIGOUCMqGDGp1fmvmbnrG+C0cmCcym2mxg8T2IHJvi7y9qeL6a:RGsq5GOUCMPyp9mvmbnr8rmLFRiA5P2W
MD5:	783D267F2B183840DA0F85BF7A2451C9
SHA1:	31E60EE045F5623F471F7E949EE0D9C669FA477C
SHA-256:	9760DDCBD0B0F1E19CA598E12B1B848D50DE991DD971651A8C73E7DA3EA712BC
SHA-512:	1F12FC7284E1AA4B70B864951F64BA5AB058E65B0C5359370398D3DD80AC7127872D0F00039AF954A0BB5FA714BE47ACA7426B962C816E6665A7D84128FE2D52
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/195-76bc13d26de34dc2.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[195],{30195:function(e,t,s){var a,n;s.d(t,{DJ:function(){return l},G0:function(){return Oe},IX:function(){return Ze},NL:function(){return d},O7:function(){return be},Rx:function(){return ke},Ry:function(){return Te},Yj:function(){return we},Z_:function(){return xe},i0:function(){return Ce}}),function(e){e.assertEqual=e=>e,e.assertIs=function(e){},e.assertNever=function(e){throw new Error},e.arrayToEnum=e=>{const t={};for(const s of e)t[s]=s;return t},e.getValidEnumValues=t=>{const s=e.objectKeys(t).filter((e=>"number"!==typeof t[t[e]])),a={};for(const e of s)a[e]=t[e];return e.objectValues(a)},e.objectValues=t=>e.objectKeys(t).map((function(e){return t[e]})),e.objectKeys="function"===typeof Object.keys?e=>Object.keys(e):e=>{const t=[];for(const s in e)Object.prototype.hasOwnProperty.call(e,s)&&t.push(s);return t},e.find=(e,t)=>{for(const s of e)if(t(s))return s},e.isInteger="function"===typeof Number.isInteger?e=>Num

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49925), with no line terminators
Category:	downloaded
Size (bytes):	49925
Entropy (8bit):	5.43823215611698
Encrypted:	false
SSDEEP:	1536:v4qPrKBTh8vtUUfELDyyDLB+bdQKvJGCe/d4SklxvRq7S0zbpMHOvR6j2TcAIYvE:hodv+uE
MD5:	E1965D2FA76087D8B248811FF2DBA7E9
SHA1:	8ED53AEDFB2B1853A0CA1EB4FA47CC872105D8D6
SHA-256:	8DAB252914A1B3D8C448D8E379DD429E8695826959AEB4B668889A5FEB83590B
SHA-512:	34C9A43ED56E1BCCB7CBD05B6923B35D3AE0E47ACF3995B7F356ABD7E9324C071045C1221CA7F2C43B9454422E23B85174EF059F732FEFEFE7D12DC818E58FED
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/pages/forsale/%5Bdomain%5D-72b1bac5c056e11b.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("@ux/button").default,require("@ux/message-overlay").default,require("@ux/modal").default,require("@ux/spinner").default,require("@ux/text").default):"function"===typeof define&&define.amd?define(["@ux/button","@ux/message-overlay","@ux/modal","@ux/spinner","@ux/text"],t):"object"===typeof exports?exports._N_E=t(require("@ux/button").default,require("@ux/message-overlay").default,require("@ux/modal").default,require("@ux/spinner").default,require("@ux/text").default):e._N_E=t(e.ux.Button,e.ux.MessageOverlay,e.ux.Modal,e.ux.Spinner,e.ux.Text)}(self,(function(e,t,r,n,a){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[700],{1355:function(e,t,r){"use strict";r.d(t,{Z:function(){return q}});var n=r(9499),a=r(3899),i=r(6628),o=r(2117),s=r.n(o),c=r(2938),l=r(5640),d=r(4184),u=r.n(d),m=r(1202),f=r.n(m),p=r(5511),x=r(6655),v=r(4894),j=r.n(v),h=r(8722),y=r.n(h),b=r(5893);function g(e,t){var

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.640124417356094
Encrypted:	false
SSDEEP:	96:jdcblexO4F4T/W4+xj6VzTtdEjyQ+LOV4pJU1yjLCOrjez3XxTt7FPtBert:jabD4F4Tu4/hH9aojerthBct
MD5:	6EE390115E67276C67E99640E898138D
SHA1:	8F39DB90EFAB0777EA39D0A95ED95CD5AD1F3BB6
SHA-256:	DE476D20BBFD56A817BEF1FF073D9317BF8CDD7EA58F8E60619D82BD4788887D
SHA-512:	8EBA31C1CFA44D098CE78F5C7A7DC8C5B24244C54F1E6F8C53C3248C32C6E85E64C6C6D7ABF56CDADB87FD6B50992DC8B8D31F04496E1E8D686822997AF94698
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$......................................................................................V...V..&V..OV..wV...V...V...V...V...V...V..xV..OV..'V...............................................................................................................................V...V..-V..rV...V...V...V...V...V...V...V...V...V...V...V...V...V...V..sV../V...........................................................................................................V...V..CV...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..gV...............................................................................................V...V..2V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..eV..9V...V...V...........................................................................................V...V..pV...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..JV...V.....................

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=f7fb5af606ac799ab1cf0b5647845fe9&traced=1&timestamp=1697146260223&corrid=711808553&privatelabelid=497036&vs=visible&rand=427747215&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Ftrue&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=1280&browy=907&resx=1280&resy=1024&cdepth=24&virtual_path=%2Fforsale&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=4&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&hit_id=ce5de884-6621-536a-9d2a-3aef299602e9&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24612), with no line terminators
Category:	downloaded
Size (bytes):	24612
Entropy (8bit):	5.652089769430544
Encrypted:	false
SSDEEP:	768:98sZx5wWReeKA0YaA4A+ANtAJDvhDgZLd934GZgGlhBV7/cpQBabzKN7DA8A4HVb:nXHR/UdhDgZLd934GZgGlhBV7/cpQsbQ
MD5:	B9636D5B18A7A4B1EB8D2730E149B43D
SHA1:	CCBE5D63E6855A9FC9B27903A40A9A43736C58D8
SHA-256:	A94BA6999A63FFB930F1E32B3D9752A31E391978039904DCE045098740C85C48
SHA-512:	2B29EBF4B1113F686AB9B93E251A312688EDABAF1E98BC78ED01D1B9796B65836B0A021F8E1D02EC473294042CBB2AE121B5041C855BBAE0044B02288E6C5679
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/7925-157a1c4da84f914f.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7925],{27388:function(e,r,t){var i=t(63782);function a(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);r&&(i=i.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,i)}return t}function s(e){return{valueOf:function(){return e},millis:1e3e}}var n=s(60),l=s(60n),o=s(24l),c={TTL_1_MIN:n,TTL_10_MINS:s(10n),TTL_20_MINS:s(20n),TTL_30_MINS:s(30n),TTL_1_HOUR:l,TTL_2_HOURS:s(2l),TTL_6_HOURS:s(6l),TTL_12_HOURS:s(12l),TTL_1_DAY:o,TTL_1_WEEK:s(7o),TTL_1_MONTH:s(30o),TTL_1_YEAR:s(365o)};e.exports=function(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?a(Object(t),!0).forEach((function(r){i(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):a(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}({

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20466)
Category:	downloaded
Size (bytes):	26321
Entropy (8bit):	5.353478100773653
Encrypted:	false
SSDEEP:	384:b6pOazraJOFoImrzA/N+pZZhuXXjR4KuliDyVRgXTWiSoEY4cAB:bgkOEzc+3ZIHt4KTWAiiScO
MD5:	2386AA9F5DC2307E7FA8864FB12B24A2
SHA1:	1ADDE657E27906C931B5D8F4B99D7ECA94B6E992
SHA-256:	DE9F32DCE7D9FEBEEF994802D42EFFA132DC16740DEF25834BBEF4622B48FC02
SHA-512:	A926942F94B5050E746390F730DD9B5EB5562352F73B8B1DD4B7DFDE983C80FD784E37B98C4247C0965E835C77B98C506E06C3B54F2281A41086699E355BA5F8
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/2386aa9f5dc2307e7fa8864fb12b24a2/browser-deprecation-banner.header-chunk.min.js
Preview:	"use strict";(self.webpackChunkNoHeader=self.webpackChunkNoHeader\|\|[]).push([["browser-deprecation-banner"],{"./node_modules/@ux/browser-deprecation-banner/src/index.js":./!****************************************************************************!\. !* ./node_modules/@ux/browser-deprecation-banner/src/index.js + 9 modules !. \*****************************************************************************/(e,t,r)=>{r.r(t),r.d(t,{default:()=>P});var s=r("./node_modules/@babel/runtime/helpers/esm/defineProperty.js"),i=r("react"),n=r.n(i),o=r("prop-types"),a=r.n(o),c=r("react-intl");const d={"Amazon Silk":"amazon_silk","Android Browser":"android",Bada:"bada",BlackBerry:"blackberry",Chrome:"chrome",Chromium:"chromium",Electron:"electron",Epiphany:"epiphany",Firefox:"firefox",Focus:"focus",Generic:"generic","Google Search":"google_search",Googlebot:"googlebot","Internet Explorer":"ie","K-Meleon":"k_meleon",Maxthon:"maxthon","Microsoft Edge":"edge","MZ Browser":"mz","NAVER Whale

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54
Entropy (8bit):	3.9004622153594406
Encrypted:	false
SSDEEP:	3:YGKXIIciQ7QCYY:YGKWinXY
MD5:	AD5E097D2669EBCC5C27DFC626B65DE7
SHA1:	1892F56993163D21EBA90C8D00569566E7C2AE57
SHA-256:	B6B01E95FDEEE1E1638085CD0B9793D771339985C4BB729D6E9D1113BA27D619
SHA-512:	DC6A307B908370E019B8C9CF75E06EE4857B9C0DC760A28A3FC1752A558CAA94CBD3C1C5E051F79A7BFFA7971994AFE6085528F47856D251D20B72A6752162D3
Malicious:	false
Reputation:	low
URL:	https://sso.afternic.com/v1/api/idp/afternic-v2/header?marketid=en-US
Preview:	{"code": 1, "message": "Ok", "data": {"app_name": ""}}

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2528)
Category:	downloaded
Size (bytes):	2566
Entropy (8bit):	5.185066759115089
Encrypted:	false
SSDEEP:	48:Qoz0S8A4TVbjQcEtcWvVLccihtls44af4SCoFw0/0bVoKE1CFwSsg:/0Z55sX9w5r64XfNXFw0MJDsg
MD5:	5258841B635EE7153FDD875101E35785
SHA1:	7690C3B2677404745127991B05A5237023C5790A
SHA-256:	8389E29219ED4262F8082DCA7DB2C33741AEF2202CAB0E8BE86BA895CED1AB4A
SHA-512:	45D07B64E49F2B82F14ED43921EAA1D07CA9A3F59F831B8537FDBA6B826DA67AE42BC956285061B5405AD93FBF4B23CBFDB78A6BE4E3CDCF435DA9FD04BC592C
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs-next/5258841b635ee7153fdd875101e35785/heartbeat.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("heartbeat",[],e):"object"==typeof exports?exports.heartbeat=e():t.heartbeat=e()}(self,(function(){return(()=>{"use strict";var t={d:(e,o)=>{for(var n in o)t.o(o,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:o[n]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function o(){return function(t){var e=window.location.search;"?"===e[0]&&(e=e.substring(1));var o,n=e.split("&");for(o=0;o<n.length;o+=1){var i=n[o].split("=");if(i[0]===t)return i[1]}return""}("plid")}function n(){var t=window.location.hostname.includes("co.uk")?-3:-2;return window.location.hostname.split(".").slice(t).join(".")}function i(){var t,e,i=(t=window.location.hostname,e=n(),t.replace(".".concat(e),"")),a

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	418035
Entropy (8bit):	5.419972699534306
Encrypted:	false
SSDEEP:	3072:HFV+rANGGfwAqv1eRG8g+055O4NhRMAFIJGK7sqgDNx79BdvZyg9YzS1QDD9gNvb:TsANGGfwDvddRxqS7TmzSuDrQ5wwxTJ
MD5:	21A6E383861511E5E88E79D06B25A933
SHA1:	7E7B3D002CA08AC728F174AA68183902729E5CB5
SHA-256:	FC652AB4A914FB906D6F61017857E434552307D8FE58CF225E7188BD9CF9354B
SHA-512:	E51C162D121B326BC9D86A37FDBD0EDC24B2278C5DBAF82EBB9FD1EEE81879301638EB6DC443F6968AF84E74AB479337E2CEBEECB6F2214845AC0C6107B6F3C8
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/pages/_app-ae8116a77337ec35.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("prop-types"),require("react-intl").default):"function"===typeof define&&define.amd?define(["prop-types","react-intl"],t):"object"===typeof exports?exports._N_E=t(require("prop-types"),require("react-intl").default):e._N_E=t(e.PropTypes,e.ux.intl)}(self,(function(e,t){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{62756:function(e,t,r){var n={"./mediatemple.json":39002,"./wpfis.json":58020};function o(e){var t=a(e);return r(t)}function a(e){if(!r.o(n,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return n[e]}o.keys=function(){return Object.keys(n)},o.resolve=a,e.exports=o,o.id=62756},84355:function(e,t,r){var n={"./commerce-registration.json":89996,"./welcome.json":4038};function o(e){var t=a(e);return r(t)}function a(e){if(!r.o(n,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return n[e]}o.keys=func

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2776), with no line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.229638544340498
Encrypted:	false
SSDEEP:	48:STK5JIZVHt0u5nYJefi2hbI5PcQ6vFEFGbqvUo3kmF7mX+HKI1fJxAsUbZpqGelD:F5JIZb0u5YJFPc0LawAQ
MD5:	183E1E5DFBD0DD4D3AD097823FDBD899
SHA1:	E739C896AF80574D79A7AF406F439951AC48235D
SHA-256:	671D94218E6E35CD81DE910F3496031E560256439C6CC836E44A2D3E6AAF1BEC
SHA-512:	40FDACDA3F0F7E81401547F67E46238615C4F6060B3B3374DE01737B3A571B4F0542D24FA76A179F62F4BA55A91EF1DFE64D0D91408B2DC347D178E3D03ABB4F
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/pages/legal-63a88e3d29985078.js
Preview:	!function(e,r){"object"===typeof exports&&"object"===typeof module?module.exports=r(require("ux"),require("@ux/growl").default,require("@ux/message-overlay").default,require("@ux/modal").default,require("@ux/spinner").default,require("@ux/text").default,require("@ux/util").default):"function"===typeof define&&define.amd?define(["ux","@ux/growl","@ux/message-overlay","@ux/modal","@ux/spinner","@ux/text","@ux/util"],r):"object"===typeof exports?exports._N_E=r(require("ux"),require("@ux/growl").default,require("@ux/message-overlay").default,require("@ux/modal").default,require("@ux/spinner").default,require("@ux/text").default,require("@ux/util").default):e._N_E=r(e.ux,e.ux.Growl,e.ux.MessageOverlay,e.ux.Modal,e.ux.Spinner,e.ux.Text,e.ux.utils)}(self,(function(e,r,t,i,u,s,n){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3270],{88529:function(e,r,t){"use strict";t.r(r);var i=t(25640),u=t(78722),s=t.n(u),n=t(37440),a=t(85893);r.default=(0,n.o)({authRequired:!1})((()=>{const

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105203
Entropy (8bit):	5.295225245302266
Encrypted:	false
SSDEEP:	1536:AoHfss+Yg+mnbaWoCTWPJvVDfyYGZNvCsyJR9AExAiu/A3fIUp4TNi:Ao7mnncNsylQs
MD5:	587D9347DB8A1ABFF1F1B5C892F12D47
SHA1:	214F487A49892F6E36E24A77B4ACBCC388DA53CC
SHA-256:	8D421823D490386B3D6180A6F34FE86738FD918BDCA6AC5CEA2482491E021AEE
SHA-512:	EFEB8E6ADB64C91C8BE7E207AAF9B022D2F00DC9C4152A3B1105FECC10C22C1E756B4D8D03C754F9907E643609D5B0D73A2E4071DF14DFF7B58D7B04F0EEF7F9
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/hivemind/hivemind-3.0.1.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("hivemind",[],e):"object"==typeof exports?exports.hivemind=e():t.hivemind=e()}(window,function(){return r=[function(t,e,r){"use strict";var n=r(8),o=n.idTypes,i=n.experimentSources,u=n.PARAMETER_LABEL,n=n.DEFAULT_COHORT,a=r(52),c=a.validateApp,s=a.updateCohortAllocationsWithEid,f=a.generateDefaultAllocations,a=a.groupEligibleExperimentsById,l=r(53),p=l.getSubjectKey,y=l.getCohortId,d=l.getSubjectIdType,v=l.treatmentsToCohortAllocations,l=l.transformSplitToExperiment,b=r(56).settingsToExperiments,r=r(57);t.exports={hivemindConstants:{idTypes:o,experimentSources:i,PARAMETER_LABEL:u,DEFAULT_COHORT:n},MockWrapper:r,validateApp:c,updateCohortAllocationsWithEid:s,generateDefaultAllocations:f,groupEligibleExperimentsById:a,getSubjectKey:p,getCohortId:y,getSubjectIdType:d,treatmentsToCohortAllocations:v,transformSplitToExperiment:l,settingsToExperiments:b}},function(

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.640124417356094
Encrypted:	false
SSDEEP:	96:jdcblexO4F4T/W4+xj6VzTtdEjyQ+LOV4pJU1yjLCOrjez3XxTt7FPtBert:jabD4F4Tu4/hH9aojerthBct
MD5:	6EE390115E67276C67E99640E898138D
SHA1:	8F39DB90EFAB0777EA39D0A95ED95CD5AD1F3BB6
SHA-256:	DE476D20BBFD56A817BEF1FF073D9317BF8CDD7EA58F8E60619D82BD4788887D
SHA-512:	8EBA31C1CFA44D098CE78F5C7A7DC8C5B24244C54F1E6F8C53C3248C32C6E85E64C6C6D7ABF56CDADB87FD6B50992DC8B8D31F04496E1E8D686822997AF94698
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$......................................................................................V...V..&V..OV..wV...V...V...V...V...V...V..xV..OV..'V...............................................................................................................................V...V..-V..rV...V...V...V...V...V...V...V...V...V...V...V...V...V...V..sV../V...........................................................................................................V...V..CV...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..gV...............................................................................................V...V..2V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..eV..9V...V...V...........................................................................................V...V..pV...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V...V..JV...V.....................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7968)
Category:	downloaded
Size (bytes):	57442
Entropy (8bit):	5.87914797670477
Encrypted:	false
SSDEEP:	1536:24SM/NMz3oseZsff4toTwoHXujBs+s+7B6x3z11393PCOy:JNMz3oseZsfQoN+Z7ox3z11393Pry
MD5:	A9B1BA6F900FFD6F58214865791494F1
SHA1:	B6755D2BD8B0FDF6A6AC6F0FE3F21E67FC92A4DB
SHA-256:	97B7F7D052989919764F5B91F381E19FE6FCC02B2C79E3C62C2EB32534622839
SHA-512:	61F57A1B50A2B2265BB8D5EC13C3E753431B564705FC3C5B2D9BA4C17F640694C6166312F82534027899E40A182DE77542108560C3F94D4984E7A9BD168345E4
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/a9b1ba6f900ffd6f58214865791494f1/consent-main.css
Preview:	.d-flex{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}.ux-disrupt-backdrop{z-index:2000;}.ux-disrupt-backdrop .ux-disrupt-content{visibility:initial;}.ux-modal{max-width:1000px;}@media (max-width:800px){.ux-modal{-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;}}#privacy_widget{background:var(--ux-1u2jy43,gray);color:var(--ux-e5ryhe,white);bottom:0px;left:0px;position:fixed;z-index:2001;font-family:var(--ux-117cu43,sans-serif);font-size:var(--ux-p4h24g,.875rem);width:100%;}#privacy_widget .modal-close{-webkit-align-self:flex-end;-ms-flex-item-align:end;align-self:flex-end;font-size:var(--ux-18ime9a,1.5rem);}#privacy_view_cancel{vertical-align:top;}@media (max-width:800px){#privacy_view_cancel{-webkit-flex-order:1;-ms-flex-order:1;flex-order:1;}}#privacy_widget .alert{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-pack:justify;-webkit-justify-content:space-between;-ms-flex-pack:justify;just

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	302774
Entropy (8bit):	5.436345090599918
Encrypted:	false
SSDEEP:	3072:gtkvE7iLxo8ugRNgfPLt9HOB7E949cPWHpMMAU8m2NI:9hLxocIt9HOBg949npwU8m2u
MD5:	E97F18FA8754D7EAC4549B4CD173EE5E
SHA1:	046BE347104E027D52026029F9BD1D26793DF510
SHA-256:	903487D6A99EC35A478595C719DB03635CBE7264845C29B012115240602469F0
SHA-512:	0EEC6FDE469CE62C42881657DF244B7351C0D5930A39EB368CC65CE369F09BC70EAE6CE46D60E531CAA102550A4435A44BBA01CBE76F50CB56E6476F6FC686C1
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/pages/_app-1f9477d25853ac9d.js
Preview:	!function(t,e){"object"===typeof exports&&"object"===typeof module?module.exports=e(require("prop-types"),require("@ux/button").default,require("react-intl").default):"function"===typeof define&&define.amd?define(["prop-types","@ux/button","react-intl"],e):"object"===typeof exports?exports._N_E=e(require("prop-types"),require("@ux/button").default,require("react-intl").default):t._N_E=e(t.PropTypes,t.ux.Button,t.ux.intl)}(self,(function(t,e,r){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{47861:function(t){let e=(document.getElementById("GasketData")\|\|{}).textContent;e&&(e=JSON.parse(e)),t.exports=e},77419:function(t,e){function r(...t){return window.fetch(...t)}(e=r).default=r,e.Headers=window.Headers,e.Request=window.Request,e.Response=window.Response,e.AbortController=window.AbortController,t.exports=e},97967:function(t){const e=/(\/[$:{]locale}?\/)/,r=/^\//,n=t=>t.replace(r,"");t.exports={LocaleUtils:function(t){const{manifest:r}=t,{basePath:o=r.basePath}=t,

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/b.aspx?timestamp=1697146231569&corrid=2100105272&referrer=&privatelabelid=497036&vs=visible&rand=640582866&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&gauid=83553310.1697146223&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.log&eventdate=2023-10-12T21%3A30%3A31.570Z&eventtype=pageperf&nav_type=hard&LCP=3319&timeToInteractive=6486&FID=2&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=2&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=50cdadc00a0d71d7af2e9485f616385a&hit_id=c3d7ae5f-22e9-50fc-8c69-9fb24df0fe24
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62139), with no line terminators
Category:	downloaded
Size (bytes):	62139
Entropy (8bit):	5.3179335453173575
Encrypted:	false
SSDEEP:	768:/gugK0kT5kNR3o5iHAd3nfyx6y3nWkugySrPPIHMxqq1XhgzqKQB1izPww5+EBSc:qSFEDYqq6QBvCF8uKZ
MD5:	6D5E99CA40BB5831AC187DE9F1BFEC6A
SHA1:	74A2990DB72DE190E440F79B911E6EE0DBBA63F4
SHA-256:	EA39F35DFE02A2CC33F339EE3555DCD47ADA9E216B784D3866F9A2B77045CE06
SHA-512:	058356DE5704A2DD83D44A4EBBCE4267160D44D01201E2D55E63D8B810C467E88FEC350CB73B19A8509514CA9DED348AD73F99CF4BB97DF84EC31F40481DDCD8
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/main-147d707be46c7d26.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("react"),require("react-dom")):"function"===typeof define&&define.amd?define(["react","react-dom"],t):"object"===typeof exports?exports._N_E=t(require("react"),require("react-dom")):e._N_E=t(e.React,e.ReactDOM)}(self,(function(e,t){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{41270:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){let e=null;return{mountedInstances:new Set,updateHead:t=>{const r=e=Promise.resolve().then((()=>{if(r!==e)return;e=null;const a={};t.forEach((e=>{if("link"===e.type&&e.props["data-optimized-fonts"]){if(document.querySelector(`style[data-href="${e.props["data-href"]}"]`))return;e.props.href=e.props["data-href"],e.props["data-href"]=void 0}const t=a[e.type]\|\|[];t.push(e),a[e.type]=t}));const i=a.title?a.title[0]:null;let s="";if(i){const{children:e}=i.props;s="string"===typeof e?e:Array.isArray(e)?e.j

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/pageEvents.aspx?timestamp=1697146219984&corrid=2100105272&referrer=&privatelabelid=497036&vs=visible&rand=924280491&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.event&usrin=domain%2Cbncollge.com&eventdate=2023-10-12T21%3A30%3A19.984Z&eventtype=impression&e_id=am.tdfs.intake.maybe_forsale.impression&event_label=bncollge.com&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=2&has_consent=0&cv=3.46.21&client_name=tcc&same_site=None&trace_id=50cdadc00a0d71d7af2e9485f616385a&hit_id=7d92d8a1-c6f7-5a92-8a3e-111d29c2b585
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12701)
Category:	downloaded
Size (bytes):	13363
Entropy (8bit):	5.38931773767702
Encrypted:	false
SSDEEP:	384:b5bYu28BX+l4qMufAlXBmdWbDJyGdUpCpZv:bhY7KvedAnZv
MD5:	15DE19F42B35806FAF815298644157E0
SHA1:	62315E4A2013AAEC6AF762D71FCC800136494628
SHA-256:	7F06DEF529E0076B37F65C60085A6B1C65F1BBAB0B1F87C72C188018B5094966
SHA-512:	6506BA8B6465070FEAA86BE8803F53825B9A9922D394043CC7052CD6FBEA9548C343E6EEC7137C5D3A5BA80C11A1B02C6C6B442AE59DA3D48DEC14602062B2DB
Malicious:	false
Reputation:	low
URL:	https://ds-aksb-a.akamaihd.net/aksb.min.js
Preview:	/.Copyright 2010 Google Inc..Copyright 2016 Akamai Technolgies..Licensed under the Apache License, Version 2.0 (the "License");.you may not use this file except in compliance with the License..You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0..Unless required by applicable law or agreed to in writing, software.distributed under the License is distributed on an "AS IS" BASIS,.WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied..See the License for the specific language governing permissions and.limitations under the License...See the source code here:. http://code.google.com/p/episodes/./...!function(){function e(e,s){function u(){this.data={},this.value=[]}function d(e,t){for(var n={},r=s.getElementsByTagName(t),o=0;o<r.length;o++)e.href=r[o].src\|\|r[o].href,e.href.match(/^https?:\/\//)&&(n[e.href]=r[o]);return n}function p(e,t){if(e&&e.hasAttribute("rel"))for(var n=e.rel.split(/[\u0009\u000A\u000C\u000D\u0020]+/),r=0;r<n.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.462814895472355
Encrypted:	false
SSDEEP:	3:9IkqiSNTsfMS1CYYn:9IkqLZsxC
MD5:	C599FC75BB850EB5FD0A7AB4C1BA039B
SHA1:	B9FEE222CF2F15B7E5F285707BC1FBEDCE771050
SHA-256:	A80ECEACEB6E918FFD295C9634D844922285343EED6E6549BD9B09F9EE0D0EBB
SHA-512:	7937C4728B299DCD6013673CE393C8896F9117587C57DF4D79D4E1522FA1EE1BB21498C9DDCE5C0777A5FE6FFE228D5FF40A45CFD11298476DD41DADA28BEFAB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmsC9yG4kaTJhIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	ChoKCw3njUAOGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	752706
Entropy (8bit):	5.092072894635087
Encrypted:	false
SSDEEP:	6144:YSxya6Lha6Lla6L26tf6ef6eE6es6eh6eO6ev6en6eL6vSjrF8wNe6CIupP6JxNa:Yx
MD5:	DEFFB46D3AD0D2DB7982BF3170861FDE
SHA1:	43B284D50CCCD253D4FB86F585E290C534339579
SHA-256:	D1874C031F3D578AB81C7379DB54CE8E34E8BC16E83B9C9ECB0770C1465E435B
SHA-512:	D37E84C04495B8612B596CC411D294D9AD0548A5BB9BB51B8EAAAD0A231230F5BFB3ED5037DC763802DC112DCD1016DBD99802734822724FBC14ECC78C0DFC7B
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/694-a28bf25fac5d7af4.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[694],{1659:function(e,o,t){"use strict";t.d(o,{H4:function(){return l},L9:function(){return d},LV:function(){return p},Z0:function(){return h},hX:function(){return y},j1:function(){return c}});var i=t(8697),r=t(5187),a=t(2759),n="Lander_aws";function s(e){return e?"".concat(n,"-").concat(e.name,"-").concat(e.cohortId):n}function c(e){return e?"Domain Available":"Domain Unavailable - Phone Only"}function l(e){return e?"forsale":"maybe_forsale"}function u(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},o=e.action,t=e.label,i=e.value,r=e.trafficId,a=e.locale,n=e.experiment,c={ga_eventCategory:s(n),ga_eventAction:o\|\|"Unknown Action",ga_eventLabel:t\|\|"",ga_eventValue:parseFloat(i)\|\|0};r&&(c.ga_dimension1=r),a&&(c.ga_dimension2=a),n&&(c.ga_dimension3=n.name,c.ga_dimension4=n.cohortId),"undefined"!==typeof utag&&utag.link(c)}function d(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},o=e.action,t=e.leg

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	150819
Entropy (8bit):	5.5544795391427195
Encrypted:	false
SSDEEP:	1536:jnzW5lvX3B33LPyHq3X2ry5joHg2fFUZq7C5BuUOAFzgaYjzPwgExlNwoqaHGuKX:0LHB0UOAFzJMPslNwojLfiBF9/aC
MD5:	CDD6EEC33FF95C8F46A90455FAFE7F43
SHA1:	07DB97483F38C13EB36AC430AFED285EFFA44252
SHA-256:	930EFFC965F29B5E4668C9DBA96E475CCABF69FC1A739FA82D5A0E8D943A971C
SHA-512:	800C9C80EDFCEDC3BDA3EB2BC79FCE2607B66EF8A47A12C98E228A59461A7CE913ED14ACB9F1F63176540DA7B68C6DF41BA49005B7BDA1530EF79A9EC1CEF32D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3271022174317622310",packages:"domains",module:"ads",version:"1",m:{ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",rsm:0,cdh:""}};var m;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"obj

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24676)
Category:	downloaded
Size (bytes):	24712
Entropy (8bit):	5.103080242774141
Encrypted:	false
SSDEEP:	384:Vc5AGoZX3Pdm3P8XgLXro91T616kjyTAn5jJyyJPkgz4MHdnU:CAGKsiTWE92kcHe
MD5:	CE554D2333F3801ABAFB32DA18213FF7
SHA1:	EF2B32494849244D9B9D8C23178E082CEC9EAB7F
SHA-256:	6E74C12390BDB48BF5B0BB295CEED4F68ADD11467D2472D983A42E3023ECF312
SHA-512:	A4AE7136F4AA10022DBC69FC475386135A752EAB93721102B4C32773FBFC815E06E41BF38A3C9CC96C638B01D65242E35DEBB2535BCDEDA8B02BB42A5C920B5E
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
Preview:	!function t(e,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define("tti",[],n):"object"==typeof exports?exports["tti"]=n():e["tti"]=n()}(window,function(){return r={},i.m=n=[function(t,e){var n;n=function(){return this}();try{n=n\|\|Function("return this")()}catch(t){"object"==typeof window&&(n=window)}t.exports=n},function(t,e,n){"use strict";e.getWindow=e.getBaseHost=undefined;var r=function t(e){return e&&e.__esModule?e:{default:e}}(n(11));n(2);var i,o,u,a,s=(i="",u={document:o=Object.create({get cookie(){return i},set cookie(t){i=t}})},a={},"undefined"==typeof window?{window:u,document:o,navigator:a}:{window:window\|\|u,document:window.document\|\|o,navigator:navigator\|\|a}),c=function(){return s.window};var f=function(){var t=c().location;return t&&t.hostname?t.hostname:""},l=function(t){var e=f();t&&r.default.isSet(t)&&(e=r.default.get(t));var n=e.split(".");2<=n.length&&(e=n.slice(n.length-2).join("."));return e};(function

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65472)
Category:	downloaded
Size (bytes):	292010
Entropy (8bit):	5.357259981097241
Encrypted:	false
SSDEEP:	3072:TStpNkya2y5xJThoqdUkKICOiYwou3Pfdez6ipb5wbISfN3NpnQ2oY8JGjOR3vLg:GvNkX26xJOq2diiYOFenDG6O97cHI
MD5:	324CECF51C6175568B3A9A48BF90EC04
SHA1:	87D5E4E512969E9AB8DCEDBF5A4B6F38F7263422
SHA-256:	67FB89FE732D6F1CE08E4F998D06D643804361B32B9888EC469ADA261719F41A
SHA-512:	0482A94B08EF2EA8C21467690BBDD7F9E023B6690D931483D2806F52358832B93C8B4A65CBC153C49A03D863F4C96303698F930C53E84FFB32C3FD97120049BE
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/324cecf51c6175568b3a9a48bf90ec04/vendor.min.js
Preview:	/! For license information please see vendor.js.LICENSE.txt /.(globalThis.webpackChunkuxcore2WebpackJsonp=globalThis.webpackChunkuxcore2WebpackJsonp\|\|[]).push([[736],{7051:(e,t,n)=>{"use strict";n.r(t),n.d(t,{arrow:()=>C,autoPlacement:()=>P,autoUpdate:()=>ve,computePosition:()=>ye,detectOverflow:()=>O,flip:()=>N,getOverflowAncestors:()=>ne,hide:()=>A,inline:()=>I,limitShift:()=>H,offset:()=>D,platform:()=>me,shift:()=>F,size:()=>B});const r=["top","right","bottom","left"],o=["start","end"],a=r.reduce(((e,t)=>e.concat(t,t+"-"+o[0],t+"-"+o[1])),[]),i=Math.min,l=Math.max,u=Math.round,s=Math.floor,c=e=>({x:e,y:e}),f={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function p(e,t,n){return l(e,i(t,n))}function h(e,t){return"function"==typeof e?e(t):e}function m(e){return e.split("-")[0]}function v(e){return e.split("-")[1]}function y(e){return"x"===e?"y":"x"}function g(e){return"y"===e?"height":"width"}function b(e){return["top","bottom"].includes(m(e))?"y

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114072
Entropy (8bit):	5.318075940299169
Encrypted:	false
SSDEEP:	1536:kqnipjMwBnMDVqMmkGXpC3L653NxyE28I7OtcYHW:ejT56L6rMY2
MD5:	9C6FA90AB03AD12F218529B53F507CDF
SHA1:	4982E7B2C042C332D8270383201F97016E65662D
SHA-256:	8ABD7D6DC81E63C100E77BE1D4C09C67F250AE9A933EC11446A7A99A629DF650
SHA-512:	F990F0D1283977461B543B8E2F88B3F31B26EDA2DC8BDC17C2DFB6DC2DDB7184EDD559EEF0E747E286D57F849BF0DAEDFBE6C212C15868FA8412F57FCD49243B
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/main-9bdc9a9bbec1efdd.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("react"),require("react-dom")):"function"===typeof define&&define.amd?define(["react","react-dom"],t):"object"===typeof exports?exports._N_E=t(require("react"),require("react-dom")):e._N_E=t(e.React,e.ReactDOM)}(self,(function(e,t){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{5409:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.addBasePath=function(e,t){0;return a.normalizePathTrailingSlash(n.addPathPrefix(e,""))};var n=r(20062),a=r(5737);("function"===typeof t.default\|\|"object"===typeof t.default&&null!==t.default)&&"undefined"===typeof t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},17640:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.addLocale=void 0;r(5737);t.addLocale=function(e){return e},("function"===typeof t.default\|\|"o

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/2.41.0/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/pageEvents.aspx?timestamp=1697146260284&corrid=711808553&referrer=&privatelabelid=497036&vs=visible&rand=1047037696&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Ftrue&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.event&usrin=market%2Cen-US%5Esplit%2C%5Euxcore%2C2%5Ecurrency%2CUSD%5Ehostname%2Cwww.afternic.com%5Epath%2Cundefined%5Equery%2C%7B%7D%5Ecountry%2CUnited%20States%5Elang%2CEnglish&eventdate=2023-10-12T21%3A31%3A00.285Z&eventtype=impression&absolutex=0&absolutey=0&relativex=0&relativey=0&e_id=uxp.hyd.int.noheader.gdforsale.impression&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=4&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=f7fb5af606ac799ab1cf0b5647845fe9&hit_id=5a280f06-7696-5f4a-8f28-d9378047b143
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/b.aspx?timestamp=1697152225357&corrid=563228417&referrer=&privatelabelid=497036&vs=visible&rand=2082057022&sitename=www.afternic.com&page=%2Flegal&location=https%3A%2F%2Fwww.afternic.com%2Flegal&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-166.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.log&eventdate=2023-10-12T23%3A10%3A25.358Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1697152219068&connectStart=1697152218553&domComplete=1697152225292&domContentLoadedEventEnd=1697152224871&domContentLoadedEventStart=1697152224871&domInteractive=1697152221980&domLoading=1697152219821&domainLookupEnd=1697152218553&domainLookupStart=1697152218553&fetchStart=1697152218532&navigationStart=1697152218528&requestStart=1697152219071&responseEnd=1697152220368&responseStart=1697152219641&loadEventStart=1697152225292&loadEventEnd=0&transferSize=379071&encodedBodySize=378771&decodedBodySize=378771&navigationType=navigate&marks=&measures=Next.js-before-hydration%2C5652%5ENext.js-hydration%2C17&fp=3198&fcp=3198&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=5&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&trace_id=9331bdd1bf3f5218aead333d16b735cd&hit_id=5f5faba7-8504-5c5b-bb7e-921088476f18
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70792
Entropy (8bit):	5.315635049743551
Encrypted:	false
SSDEEP:	1536:KzFSt+dcNANA2AKI8s/enikywvSuLvOL4y4p:4FSt+daL/enikywFf
MD5:	B46D9EE82236E7D7651C16A0384D5066
SHA1:	BCBC28D7D16E0110492E022042213C053E21C768
SHA-256:	B80AFD0956600233B36053C26A99EE37834C0D8974AB7F6FB83F7679B71E9A97
SHA-512:	80B816783DF3C0E2CDE8FAD3A6EC0A84DF57FF2824476F32EE263B2D146224795FF2DA1CCE833732F6DCD89A82BA56FB5B45E72E2E7929FFD4869F85578B6A98
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.118bdff6ecd9e1237278.chunk.js?Q_CLIENTVERSION=1.100.0&Q_CLIENTTYPE=web&Q_BRANDID=www.afternic.com
Preview:	try{(window["WAFQualtricsWebpackJsonP-cloud-1.100.0"]=window["WAFQualtricsWebpackJsonP-cloud-1.100.0"]\|\|[]).push([[12],{18:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"d",(function(){return a})),n.d(t,"c",(function(){return s})),n.d(t,"b",(function(){return c}));var o=[],i=function(e){var t=e;return"string"==typeof e&&(t=document.getElementById(e)),t},r=function(e,t){var n;13!==e.which&&32!==e.which\|\|(e.preventDefault(),(n=document.querySelector('button, a[href], input, select, textarea, [tabindex]:not([tabindex="-1"])'))&&n.focus(),t())},a=function(e,t,n,i){void 0===i&&(i=!1),o=o\|\|[],e&&(o.push({elementToObserve:e,eventName:t,eventHandler:n,preventRemove:i\|\|!1}),e.addEventListener(t,n,!1))},s=function(e){return"string"==typeof e},c=function(e){return"object"==typeof e&&e instanceof Array}},27:function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var o=n(0),i=function(){function e(){var e=this;this.cookieSize=0,documen

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6153), with no line terminators
Category:	downloaded
Size (bytes):	6153
Entropy (8bit):	5.443276405929586
Encrypted:	false
SSDEEP:	192:3v5Kjz2xflFAT57ldKsiHu+MKx34Wrme1sz+7BAhbUa1/PKqYzAQaId+snrDTc5L:3vsexXo71mlNc
MD5:	187530F6BF1A536D348C61DFA02CBD8F
SHA1:	781B83641AA774299BB0BBFAA9CC9BF80A5F1FE8
SHA-256:	C17E39E5732AA2AE1D661AF8661992EF121F53AFBABF275A2E1B3B525F3D71A5
SHA-512:	09343E02BE9BAB0900222D175EF9A5C796F26BA4E5B804E7E30732B340D0352F7528DEC1D7C53B6D64885821A9A08D329D1C8564EE4CA52271B7C84DDF9D785B
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/webpack-6a87aab421082f2f.js
Preview:	!function(){"use strict";var c={},e={};function t(d){var n=e[d];if(void 0!==n)return n.exports;var f=e[d]={id:d,loaded:!1,exports:{}},r=!0;try{c[d].call(f.exports,f,f.exports,t),r=!1}finally{r&&delete e[d]}return f.loaded=!0,f.exports}t.m=c,function(){var c=[];t.O=function(e,d,n,f){if(!d){var r=1/0;for(u=0;u<c.length;u++){d=c[u][0],n=c[u][1],f=c[u][2];for(var a=!0,o=0;o<d.length;o++)(!1&f\|\|r>=f)&&Object.keys(t.O).every((function(c){return t.O[c](d[o])}))?d.splice(o--,1):(a=!1,f<r&&(r=f));if(a){c.splice(u--,1);var i=n();void 0!==i&&(e=i)}}return e}f=f\|\|0;for(var u=c.length;u>0&&c[u-1][2]>f;u--)c[u]=c[u-1];c[u]=[d,n,f]}}(),t.n=function(c){var e=c&&c.__esModule?function(){return c.default}:function(){return c};return t.d(e,{a:e}),e},function(){var c,e=Object.getPrototypeOf?function(c){return Object.getPrototypeOf(c)}:function(c){return c.__proto__};t.t=function(d,n){if(1&n&&(d=this(d)),8&n)return d;if("object"===typeof d&&d){if(4&n&&d.__esModule)return d;if(16&n&&"function"===typeof d.the

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	202297
Entropy (8bit):	5.648629109660456
Encrypted:	false
SSDEEP:	3072:qcZ9bORJtlucLb6Ts/OfOxmqZwTFbOWTSD+L9dkKx6p:qObCJtlucLxGfOhwxXL9dkA0
MD5:	08776806446620FB63CA3FA49586CF2C
SHA1:	7E6A647C035C90D9C22C961F4DBEBD381E0DB942
SHA-256:	E542B0428DBFF039E68D760BEA46CA85CDF9108D40825C723CB8F5CDAA6B4B39
SHA-512:	1A6264F9A49BA1BB171697D140919FC59EADD8B51B33CA2DA3B732A187525D40F6794099026A1B0F434294D567E5C3411D985F4D62C60BE4B9FA649B2D2D48EE
Malicious:	false
Reputation:	low
URL:	https://sso.afternic.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js
Preview:	(function(){function KPSDK_0x5626(_0x77ac84,_0x2602c3){var _0x1adc03=KPSDK_0x1adc();return KPSDK_0x5626=function(_0x562641,_0x3fe41e){_0x562641=_0x562641-0xf3;var _0x339d77=_0x1adc03[_0x562641];if(KPSDK_0x5626['ksZKLi']===undefined){var _0x568828=function(_0x31aadd){var _0x4543de='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x5df36b='',_0x184d92='';for(var _0x44905c=0x0,_0x17c907,_0x5199b1,_0x313d5f=0x0;_0x5199b1=_0x31aadd['charAt'](_0x313d5f++);~_0x5199b1&&(_0x17c907=_0x44905c%0x4?_0x17c9070x40+_0x5199b1:_0x5199b1,_0x44905c++%0x4)?_0x5df36b+=String['fromCharCode'](0xff&_0x17c907>>(-0x2_0x44905c&0x6)):0x0){_0x5199b1=_0x4543de['indexOf'](_0x5199b1);}for(var _0x486b83=0x0,_0x1ae006=_0x5df36b['length'];_0x486b83<_0x1ae006;_0x486b83++){_0x184d92+='%'+('00'+_0x5df36b['charCodeAt'](_0x486b83)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x184d92);};var _0x42bc7d=function(_0x12c040,_0x2dcaae){var _0x31a06f=[],_0x35c384=0x0,_0x2804ae,_0x520115='';

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8297), with no line terminators
Category:	downloaded
Size (bytes):	8297
Entropy (8bit):	5.033608518103373
Encrypted:	false
SSDEEP:	96:G503lSDNOGeXFIXcGBSjK1Np/FqdrKPXH94J+U9Ab:4uyeIXcGAjK17/cdry9fUib
MD5:	99D706E611CB739B5E69147EA28383DA
SHA1:	07F033C50AF0B40FA9B82E8F2D7FC0354587C3D4
SHA-256:	A5F3DEBC804E20FABE85412DF19937745C71CC7BECD7BD12B8F4408B59953D2B
SHA-512:	C87555B0B6C11BE2D33DE4302CBEF3105E80C0B72B56D93D5572586D96683E9F24B9E49CF7B94D60C0A713D1B0A09FA7097C105F2C194560A17A961C1B03A83F
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/IPKydPNOo6nmoO2rQ5DFN/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(s,c,e,a,t,n,i,o,f,r,u,p,d,b,h,l,k,j,g,m,v,w,_,y,I,z,S,B,F,x,A,D,E,L){return{__rewrites:{beforeFiles:[],afterFiles:[{source:"/v1",destination:"/"},{source:"/v1/:path",destination:"/:path"}],fallback:[]},"/":[e,I,p,z,"static/chunks/pages/index-76d5a8ac75708f65.js"],"/_error":["static/chunks/pages/_error-9892c3da9e377a8f.js"],"/accept-terms":[S,"static/chunks/pages/accept-terms-af9bc08442a2fed3.js"],"/access":["static/chunks/pages/access-d6c0b844504c0bb5.js"],"/account/activity":[c,f,d,"static/chunks/1181-65aaff08936e8010.js",s,"static/css/1ccbcc93d030d080.css","static/chunks/pages/account/activity-977d9029c65f22ab.js"],"/account/checkup":[B,"static/chunks/pages/account/checkup-ee732190aeac5d8b.js"],"/account/complete":["static/chunks/pages/account/complete-d48b96800a067baf.js"],"/account/conflict":[S,"static/chunks/pages/account/conflict-1fbf19ad7ee4d8a6.js"],"/account/consent":["static/chunks/pages/account/consent-950618bbd7184c89.js"],"/account/create":

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157316
Entropy (8bit):	5.278992075957542
Encrypted:	false
SSDEEP:	1536:5NVUXVHleTaKPOQ35zAO8JdRhD0CP0j2m08iJmDyIBTUVScR4Ph1:xUlFLvcARuCofrDy6PD
MD5:	453EE500980C44E5371D24E447769804
SHA1:	D919CD85A1EB9463487DCD71A5EC36D5C88979FE
SHA-256:	854E6F81A2D63F859148A4AAC7512A3F828E1C731A5E729B9C28BAB4BA737B0A
SHA-512:	B1083508F8C73D33D809021EA10787BF4497A9D0458B2AE036E03216FDFB50FA7C3FADE5C5BCAB411AC6BC45FE0174C145C3B4F2285026B7E6C6D39789E56DB9
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/pages/_app-03d2ded6e00916e9.js
Preview:	!function(e,t){"object"===typeof exports&&"object"===typeof module?module.exports=t(require("prop-types"),require("react-intl").default):"function"===typeof define&&define.amd?define(["prop-types","react-intl"],t):"object"===typeof exports?exports._N_E=t(require("prop-types"),require("react-intl").default):e._N_E=t(e.PropTypes,e.ux.intl)}(self,(function(e,t){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{7861:function(e){let t=(document.getElementById("GasketData")\|\|{}).textContent;t&&(t=JSON.parse(t)),e.exports=t},7419:function(e,t){function r(...e){return window.fetch(...e)}(t=r).default=r,t.Headers=window.Headers,t.Request=window.Request,t.Response=window.Response,t.AbortController=window.AbortController,e.exports=t},7967:function(e){const t=/(\/[$:{]locale}?\/)/,r=/^\//,n=e=>e.replace(r,"");e.exports={LocaleUtils:function(e){const{manifest:r}=e,{basePath:o=r.basePath}=e,{defaultLocale:i="en",localesMap:a,paths:u,locales:c}=r,s=i.split("-")[0];this.getFallbackL

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=gpl/afternic/202203181533&cb=1697146221846
Preview:	//

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/b.aspx?timestamp=1697146219973&corrid=2100105272&referrer=&privatelabelid=497036&vs=visible&rand=372097880&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.log&eventdate=2023-10-12T21%3A30%3A19.974Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1697146213188&connectStart=1697146212625&domComplete=1697146219900&domContentLoadedEventEnd=1697146218878&domContentLoadedEventStart=1697146218878&domInteractive=1697146216330&domLoading=1697146213811&domainLookupEnd=1697146212625&domainLookupStart=1697146212625&fetchStart=1697146212397&navigationStart=1697146212392&requestStart=1697146213189&responseEnd=1697146214208&responseStart=1697146213800&loadEventStart=1697146219900&loadEventEnd=0&transferSize=102707&encodedBodySize=102407&decodedBodySize=102407&navigationType=navigate&marks=&measures=Next.js-before-hydration%2C6462%5ENext.js-hydration%2C24&fp=3319&fcp=3319&lcp=3319&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=2&has_consent=0&cv=3.46.21&client_name=tcc&same_site=None&trace_id=50cdadc00a0d71d7af2e9485f616385a&hit_id=19cafcfe-8738-5dc6-b2d5-4e24550aea51
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (782), with no line terminators
Category:	downloaded
Size (bytes):	782
Entropy (8bit):	5.5110360194763635
Encrypted:	false
SSDEEP:	12:+dbjbHpqvpqZyjvqFLouXJOd+038QrurfwKAB8MTcQVkWdtqnK6aWXnAjMo:ibjbHiEZPcR7uzoB8f4k6tqn5nAjMo
MD5:	3FE79B776FF5571F46CCFA287AB89E32
SHA1:	FC7CDBB85AD1191228F6A96E915649FD36F8B75E
SHA-256:	BEF8311539637726E163314D8FAC57B8CE86330AD9414D6B1A73FBC74815EDC8
SHA-512:	64FDCC428CAC0087B34B397B5754136D2BDFBA9378B6E821AA31E4850094175F0F92AB76B3EB8ED4015820DDB1FA94D301F77BA60646892F3F9E530B6C6CB809
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/framework-f7ba292b22b03fed.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{5251:function(e,r,o){o(6086);var t=o(3899),n=60103;if(r.Fragment=60107,"function"===typeof Symbol&&Symbol.for){var f=Symbol.for;n=f("react.element"),r.Fragment=f("react.fragment")}var _=t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner,a=Object.prototype.hasOwnProperty,s={key:!0,ref:!0,__self:!0,__source:!0};function u(e,r,o){var t,f={},u=null,l=null;for(t in void 0!==o&&(u=""+o),void 0!==r.key&&(u=""+r.key),void 0!==r.ref&&(l=r.ref),r)a.call(r,t)&&!s.hasOwnProperty(t)&&(f[t]=r[t]);if(e&&e.defaultProps)for(t in r=e.defaultProps)void 0===f[t]&&(f[t]=r[t]);return{$$typeof:n,type:e,key:u,ref:l,props:f,_owner:_.current}}r.jsx=u,r.jsxs=u},5893:function(e,r,o){e.exports=o(5251)}}]);

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (753), with no line terminators
Category:	downloaded
Size (bytes):	753
Entropy (8bit):	5.306793014312917
Encrypted:	false
SSDEEP:	12:Q+SKB1L0mqAZ5bHtUbFkL0mxIvdAdbjsUFxAU7GLZZDUfqCGq7qmRXuWl6DE:QTKB1wqZVHqRkwKdbjsUFxAU7UZZAfqw
MD5:	2B01815F5C250464379E7C4CF118F0C1
SHA1:	A858229707BF3E56FB866D1B77BFD14A7395A63B
SHA-256:	32E1DE2FF9C57B5F4860F3DF89797CBF048C835D26465B0395DC85A127CA41FD
SHA-512:	5750D1F71CACB2299C7EEA930BEE6675392A56BC6416B5BE80C5B01F1BBD265EEBAC1E3686AF7E29C0B5F2C55F4E3605490FA761D2F8803A395E28F84918373A
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/pages/login-fc142d4720e57d28.js
Preview:	!function(t,e){"object"===typeof exports&&"object"===typeof module?module.exports=e(require("@ux/button").default,require("@ux/text").default):"function"===typeof define&&define.amd?define(["@ux/button","@ux/text"],e):"object"===typeof exports?exports._N_E=e(require("@ux/button").default,require("@ux/text").default):t._N_E=e(t.ux.Button,t.ux.Text)}(self,(function(t,e){return(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3459],{14437:function(t,e,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/login",function(){return u(17925)}])},32117:function(e){"use strict";e.exports=t},78722:function(t){"use strict";t.exports=e}},function(t){return t.O(0,[195,7811,8052,7925,9774,2888,179],(function(){return e=14437,t(t.s=e);var e})),t.O()}])}));

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65466)
Category:	downloaded
Size (bytes):	91290
Entropy (8bit):	5.2853166667926175
Encrypted:	false
SSDEEP:	768:kZuM/ekkrU29jCwgR4psh9sVAyOzbIc6IwmlwBaj1Bz2fGtLHCIpBKSR9NKf5y3z:N9g9Zt9s77dPfht7A/WFHvgU3Pa
MD5:	7A94EF1F1F352AAF85D641A223ED6F00
SHA1:	699D1D123971F8EB98E51871CE733F47ABA6E461
SHA-256:	923D5DAA410B839BDF3F05602C0E33FFDACA14FDC86C040757CBB2709D24D23B
SHA-512:	16ECB02A183A22BE790605F3C3C2AAF625881AA3148ECF37B4FF8EEF25197C361FC3E1A1E893A07C78554DB511D18568E97EAA181DD034DB1268E3E98EFD3639
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/7a94ef1f1f352aaf85d641a223ed6f00/consent-main.js
Preview:	/! For license information please see consent-main.js.LICENSE.txt /.(()=>{var e={319:(e,t,n)=>{"use strict";var r=n(2282);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=r(n(3841)),i=r(n(6295)),a=r(n(4205)),s=r(n(4033)),u=r(n(890)),c=r(n(601)),l=r(n(3701)),d=r(n(8877));const f=["active","as","className","children","design","download","external","hidden","href","icon","size","text","type"],p="ux-button",_=["critical","inline","primary","secondary","control","stateless"];const m=a.default.forwardRef((function(e,t){const n=e\|\|{},{active:r,as:s,className:m,children:v,design:h,download:y,external:g,hidden:b,href:w,icon:O,size:x,text:E,type:k="button"}=n,C=(0,i.default)(n,f);delete C.style,function(e){const{children:t,icon:n,text:r}=e}(e);const N=w?"a":"button",S=v&&!E?v:E,P=function(e,t){const n={className:`${p}-accessory`,role:"presentation"},r={};switch(e){case"cta":r.icon=a.default.createElement(l.default,n);break;case"external":r.icon=a.default.createElement(d.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5337), with no line terminators
Category:	downloaded
Size (bytes):	5337
Entropy (8bit):	5.300955540628372
Encrypted:	false
SSDEEP:	48:1aHwZwSGDhraZoY9uGdTwEhTjrJ3f3gP3SrO0Kk/2rZoY9uGFyBvYs23vzu59/Ej:1a5Fr89TEEF93y3S09Cq7+Dh2VCz+D
MD5:	935283C16D63DCB86F6F8C3FEBB08BC5
SHA1:	3F57146768B9B2FCA59D33688B8ECAF9768A0B68
SHA-256:	FB491021595B9F92D861AFDC468D49DB2B46853BD952222B697E3680FA1A4AAA
SHA-512:	E0D9C110933F004F2CF508E56866B2FE9C07CDDD4D2AB823E1042AEEB4C895C5F72492D90B62E9BC470CF11FDE0B6E074EB6E227ED477965118691491D5CD7AE
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/0c64ee3987bbbfbb2c017c1eaadfb2f5/noheader.min.css
Preview:	.container{margin-left:auto;margin-right:auto;padding-left:10px;padding-right:10px}.container::after{content:"";display:table;clear:both}@media (min-width:520px){.container{max-width:480px}}@media (min-width:768px){.container{max-width:720px}}@media (min-width:992px){.container{max-width:940px}}@media (min-width:1200px){.container{max-width:1140px}}@media (min-width:1720px){.container{max-width:1640px}}@media (max-width:767px){.container{max-width:none!important}}.container-fluid{margin-left:auto;margin-right:auto;padding-left:10px;padding-right:10px}.container-fluid::after{content:"";display:table;clear:both}.hidden-xs-up{display:none!important}@media (max-width:519px){.hidden-xs-down{display:none!important}}@media (min-width:520px){.hidden-sm-up{display:none!important}}@media (max-width:767px){.hidden-sm-down{display:none!important}}@media (min-width:768px){.hidden-md-up{display:none!important}}@media (max-width:991px){.hidden-md-down{display:none!important}}@media (min-width:992px){

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	888
Entropy (8bit):	4.212446763958118
Encrypted:	false
SSDEEP:	24:tGNttGzFDu+IQNN6EfVazHwBNxwio+NabFBl3iQmLPyyQsYiIND9:fzFdIQ7nfVazHQwiPabrmLosYiaZ
MD5:	96206A3BAA78B49C9747CD9F5AEC3E31
SHA1:	E8F5CB66107966676B98722BAFF62855819D9033
SHA-256:	B4040E95722EB3CE418E418EDE6A6C0F8BBE0EB2702569E8F9912ECB76F5E027
SHA-512:	D82AC4E2F8A2F68AF44A1E957945987F2EB1CA7DD96875B4A37B08DA041FA5BAC6E895FAAEEC130FE31E992480AE0F3DE21EAC3175BE57C94EC221D3CACC780E
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/private_label/497036/mobileLogo.96206a3baa78b49c9747cd9f5aec3e31.svg
Preview:	<svg width="118" height="118" viewBox="0 0 118 118" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M92.99 104.36C94.65 104.54 96.3 103.98 97.55 102.88C109.79 92.11 117.52 76.34 117.52 58.76C117.52 48.69 114.99 39.22 110.52 30.94C110.44 30.8 110.37 30.66 110.29 30.52C109.97 29.93 109.63 29.35 109.28 28.77C109.13 28.52 108.98 28.27 108.83 28.02C98.49 11.21 79.93 0 58.75 0C50.31 0 42.29 1.79 35.04 5C60.48 8.06 83.08 26.28 83.08 26.28L93.93 17.46L90.13 64.57L55.13 50.7L67.42 40.11C52.73 20.69 38.3 13.46 25.99 11.98C24.37 11.79 22.75 12.29 21.5 13.33C8.37 24.11 0 40.45 0 58.76C0 67.57 1.94998 75.91 5.41998 83.41C7.38998 87.54 9.81001 91.46 12.6 95.09C23.36 108.74 40.03 117.51 58.76 117.51C67.99 117.51 76.71 115.38 84.48 111.59C57.68 108.99 33.59 89.46 33.59 89.46L22.33 98.51L26.33 50.08L62.33 64.37L49.69 75.27C65.08 95.65 80.18 103 92.99 104.36Z" fill="#00E356"/>.</svg>.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 40132, version 1.66
Category:	downloaded
Size (bytes):	40132
Entropy (8bit):	7.994849227662825
Encrypted:	true
SSDEEP:	768:RUQO3U7UkgG77MfzKeiMPju/hzvGNTtPUoxIrpJZNZumPsyOKu6s7PXw+wtu1:RBO3WUzG3MfmenPiz0TBIw6XZu68YXu1
MD5:	162C9E176014C90E76618BD4B7A8A3F0
SHA1:	7FEC64F1167B3086A533379A307F257EB777C129
SHA-256:	89E3135E8430B71C9470EEBAFC1BB498233CDDE661240A03D3E864FB59A890BE
SHA-512:	7D0B1A3C1D1440B7900A4407D26612524EDC29205AE759E16DD5151E39CA79386A4076E149D61F494FD5C1C5D655652BE7738C2EC889866234E81F0B9D85F04E
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSage-bold.woff2
Preview:	wOF2OTTO.......... H.......B...@.......G...........^...@..<.`..F.6.$..x...... [..qE.q...t...5...<#....A...$m......rR.1...n.`..... .Geu.Lw..:/...{...Q/.Kh..)...\..Qk...7a...T..\|.ga.......;.......d.....{n..y.3.:..rH..`1..6.3..o"....f..O.):3..[..8.Vp.^.Ql.X...yn.o....fbtfQ...qa...=.h..0..{y.kR.....3..E...[h_..ald5vbS.j-.N....0..tW....M...!..:.....^P.6"..#.....?.$vB...G:...."jtB..1.....cHd.9..q..5..9..Z.y...7...5.}.y..~...}\cTVo....3..Y......b$.f.t..!F.ou-.h..Q1..fh..[;b.PZc.....e.........i(.......&.2E.'.~.S.A...)eJoc.F........9...y..Q.X.i(Y.K.,..7{..........7c.^.!..B....l..~CD.}.....D..(O~....0.\b....C..'(1.Q2..Fd..(n.`.s.\.RWz..S.....c..%k-. )..@!.....L...).L...u..D.b..-2.P.(...Rc....... .8....,H........f.......^......".._N..........{....>.(.^.r...xx..!x.Q......@.."k.;o....#..rQ..sx@.,.....C\.g[...0.6...W."<V.T..A..L..e..L!X. "...n.L....r.%B..m-w.V.d0.....p....Z.{.w.Gy.{.nF^.E.....b....>.GEQ.c...-.BOt.M..=.....[.)..1...E.<.....YM...._E...R..4E..o.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.440074751043314
Encrypted:	false
SSDEEP:	3:kw3dA4jgWYHJiv3dA4jgW6QfpXD3dA4jgW6Qen:FtDjdYHJwtDjd6EpXDtDjd6h
MD5:	7C3F7E060745668041278118C0BB3D6D
SHA1:	E639F56695B3CC30D78DCE7A0084AA8299A1311A
SHA-256:	DE5341313A4DC5D982CA50AE4A491E84BC5E80B0F439D87F05FC3973C1B7E59A
SHA-512:	B12A692EF9BE5857423F2DF563B986E241F7161573B5A7F23190696D1B0A50C5DA453C7BD35641FE61695B459D0A7D76F8053A8E0E0CCBC6811F800AAB1532C6
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/3.32.0/_middlewareManifest.js
Preview:	self.__MIDDLEWARE_MANIFEST=[];self.__MIDDLEWARE_MANIFEST_CB&&self.__MIDDLEWARE_MANIFEST_CB()

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71780
Entropy (8bit):	5.274564392524123
Encrypted:	false
SSDEEP:	1536:N5ezW2670hsXyt/dWLB71Yv9l9NJBV309axT9gT/2M:r7OSyekbd0ExA9
MD5:	10E1535546D792064A88C15A018DCAB9
SHA1:	97F82E48DE77C46C36E356CC1DB861A10EAD3DC6
SHA-256:	744F143E53B9D0F9EE7352D6A1D8BE64DF7291DFBC94D6D08E28FF809F4A0CD1
SHA-512:	5228C981479A795C7881CDC8EB12D9E696BB8FFB16EF56166867B4D4B011AB54BD497507F7949335722A5AD055918A49A1699CDB803FEA6296CD7245DFF7B1F7
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/3561-f7b66fc30820a7dc.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3561],{72995:function(e,t,n){"use strict";n.r(t),n.d(t,{arrow:function(){return we},autoPlacement:function(){return R},autoUpdate:function(){return ye},computePosition:function(){return ge},detectOverflow:function(){return M},flip:function(){return C},getOverflowAncestors:function(){return ne},hide:function(){return L},inline:function(){return D},limitShift:function(){return H},offset:function(){return N},platform:function(){return me},shift:function(){return F},size:function(){return I},useFloating:function(){return _e}});const r=["top","right","bottom","left"],o=["start","end"],i=r.reduce(((e,t)=>e.concat(t,t+"-"+o[0],t+"-"+o[1])),[]),a=Math.min,l=Math.max,u=Math.round,c=Math.floor,s=e=>({x:e,y:e}),f={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function p(e,t,n){return l(e,a(t,n))}function h(e,t){return"function"===typeof e?e(t):e}function m(e){return e.split("-")[0]}function y(e){return e.s

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1231)
Category:	downloaded
Size (bytes):	23423
Entropy (8bit):	5.089561023209222
Encrypted:	false
SSDEEP:	384:6yj4CfqnM6VbIMBdzj5bZvx2eNu2FFVaQk+5cP+6OYHY8YmtY6q6XsxmpjDnZXIU:6yjxfqn9iQ9zl6XEYP6z1Y2KM8K5wnog
MD5:	2A791A94037E5E338FD34D069F5A3AF8
SHA1:	2EDA31C74F8526234A056D6E8858DEE4E3818D66
SHA-256:	86FE0AE52C050D45E594932D0540521063CDAC71CE6A435E8A4ED6F419653218
SHA-512:	7B6CCAEABE143319F36DA3CC788C838D2DEAE0226141BCD5987D15BDBFB3F472F1FF04681160994668B104A09E21572A9A8A08113D9E6A9D83BB8E4313FD2E8E
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044
Preview:	//tealium universal tag - utag.7 ut4.0.202106042044, Copyright 2021 Tealium.com Inc. All Rights Reserved..window.GoogleAnalyticsObject=""\|\|"ga";window[window.GoogleAnalyticsObject]=window[window.GoogleAnalyticsObject]\|\|function(){(window[window.GoogleAnalyticsObject].q=window[window.GoogleAnalyticsObject].q\|\|[]).push(arguments);};try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|th

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44137), with no line terminators
Category:	downloaded
Size (bytes):	44137
Entropy (8bit):	5.2688092483871
Encrypted:	false
SSDEEP:	768:Yo9yskET6oNc9Azz99OyISlhFxrj9JBx8m4BQ9Qf+tCA1mUj:79Q09mIXjzBx8m4BQ9QW51my
MD5:	21DC3F8ECC2A5B69313E522CB4375BCA
SHA1:	F0208F884D023F067A17A275EBE77E26A52D50CB
SHA-256:	D4BD6ABC1E16E24FE73092B9DFCB05FF8278AC4245118E1F05BD5BA66EAD09D0
SHA-512:	777159CEA6A61D5D6C2B61173B02F75D28C3FD0C221097304320D47DF608617EA7CD5F64786B5BAFA425FCD4B1A939040944490F16ED0D717089BF4D33B40797
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/10-b3c12038beb271f3.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[10],{6666:function(e,t,n){"use strict";var r=n(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=a;var o=r(n(189)),i=r(n(3976));function a(e){let{children:t,breakpoints:n}=e;const{breakpoint:r}=(0,i.default)(...n);return t({breakpoint:r})}a.propTypes={breapoints:o.default.oneOfType([o.default.string,o.default.arrayOf("string")]),children:o.default.any}},1434:function(e,t,n){"use strict";var r=n(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=new(r(n(7768)).default)([{name:"mobile",width:520},{name:"phablet",width:768},{name:"tablet",width:992},{name:"desktop",width:1200},{name:"large",width:1720},{name:"xlarge",width:1/0}]);t.default=o},1649:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){return!("undefined"===typeof window\|\|!window.document\|\|!window.document.createElement)}},5141:function(e,t){"use strict";Object.defineProperty(t,"__esM

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/pageEvents.aspx?timestamp=1697146219904&corrid=2100105272&referrer=&privatelabelid=497036&vs=visible&rand=1607034852&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.event&usrin=market%2Cen-US%5Esplit%2C%5Euxcore%2C2%5Ecurrency%2CUSD%5Ehostname%2Cwww.afternic.com%5Epath%2Cundefined%5Equery%2C%7B%22utm_source%22%3A%22TDFS%22%2C%22utm_medium%22%3A%22sn_affiliate_click%22%2C%22utm_campaign%22%3A%22TDFS_Affiliate_Above%22%2C%22traffic_type%22%3A%22TDFS%22%2C%22traffic_id%22%3A%22GDDY%22%7D%5Ecountry%2CUnited%20States%5Elang%2CEnglish&eventdate=2023-10-12T21%3A30%3A19.905Z&eventtype=impression&absolutex=0&absolutey=0&relativex=0&relativey=0&e_id=uxp.hyd.int.noheader.gdforsale.impression&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=2&has_consent=0&cv=3.46.21&client_name=tcc&same_site=None&trace_id=50cdadc00a0d71d7af2e9485f616385a&hit_id=cfff4288-9537-558a-9944-cfba58fb779d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=50cdadc00a0d71d7af2e9485f616385a&traced=1&timestamp=1697146218771&corrid=587655779&privatelabelid=497036&vs=visible&rand=815445381&sitename=www.afternic.com&page=%2Fforsale%2Fbncollge.com&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbncollge.com%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=1280&browy=907&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS%26utm_medium%3Dsn_affiliate_click%26utm_campaign%3DTDFS_Affiliate_Above%26traffic_type%3DTDFS%26traffic_id%3DGDDY&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=1&has_consent=0&cv=3.46.21&client_name=tcc&same_site=None&hit_id=8bcbe32b-4a7d-521c-8925-3ac0039630e5&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 38559, version 1.66
Category:	downloaded
Size (bytes):	38559
Entropy (8bit):	7.994441641275266
Encrypted:	true
SSDEEP:	768:GP66jIDWHThpZ5sq6mpiZgaGLiiUBOVkWrkIqhb69cQVhVLs:GNMWHVpZ5n7piZFp6kIqgvPs
MD5:	65BD0F4EDEAA0E243CDCA23EC72A5AE6
SHA1:	A94449BE1A5531FC7970BD8688A93F08ECDE68AD
SHA-256:	400D3E1EBC917911020D89B505933E1816E138F4163D71575A707F93B6CC302F
SHA-512:	DE964C4BAF048E64708C7F581FEDD5F899A936B46D65E3656C17B26BA6821821AD652FCDA360EBD8FF236544BFFFA87191FCE02FD205E9B8D4E9B8A7C4747BA9
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSage-regular.woff2
Preview:	wOF2OTTO...........,.......B...........I...........-...`..<.`..>.6.$..t...... [f.q..-.\.U.lx?..7.6.....~.RdP.8......OL."G&.%i...c?...+<C#N.m....el.R.........[N9.R..q...m..&.pX.k..3TJ..DGTytDlEg....uy..1.0i.W..Cm...r?-..Bu.~M...L0.D.)..b}.:.,..ti._.....9....k.].R.J......6..G....3...U..L...:+{...e...... .........P.t..U.$.P.S..f.D.c......PE#.'T.b...r.H..s.B.b...C.P...AU{a.s.2!.$$.!...=.....(.Cx~.7..6{........#D..!j..QBg."#.O....c~2...b...s~....Z..J3.y.}..g..u......m...a....D<.\|L..:e[..6.fv..U.).3p....1A..A...{...%3.l...m...s....P1..o..u.......n. ......1..}....L..Z..X.w5..k....._k.....d.>. 4.3.....#....../.5v.....zh.}.z'}.......X..._#..R..c.B...jl.&.H#<.(BY..b..(..bp$....4.bQ..V..._..Zh.s.>.?5.Z..w.j.Bl......0}..{.D.......>..s.'.M...M...7zR4...N. D#.7......B >.0.......E.(0Ea...b,VpA...0).L.[.y.>.=.&.K..B..oz.8....y@......<......6V?...D.7...69.u']n-.\..'w.BN...FZ....."B.....q...*.x..f#J..w.;.....w..,.^F..s./..C.F.\.&.v.....r.\|E.x..,?.`Y.P

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:H0hCkuWthHeTn:UUkuqxeT
MD5:	A3144EE887752BC84252FAACD4DFFD83
SHA1:	172430F70BAEDA54BB9F533293E0E80A2DA5835D
SHA-256:	8B87CFF79D0F8142D02D4A5991C83A5D59A7733BCB0EBEDD0DE57E559C6EAEFB
SHA-512:	E366210709098991B8B21140DF48E50CD650E115A30A8A5EEC016B98B077C6DA3FEE972BA219409AD72E85BF575A033E1E9AAC7931B727E4BA15644AAC5349D3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkL_UfLCO8jnxIFDVNaR8USEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151585
Entropy (8bit):	5.324178646619802
Encrypted:	false
SSDEEP:	1536:WGZGfJaGcCrD9IK0te1PPyYrk2Ez4I5fdAV2VVGm2H26mcWNo5:WGZGgNteNPmcWNS
MD5:	009BFDA37C5A61FDDED1216F0C625394
SHA1:	E84B7D805AD521B7D18E86109670870B88564B08
SHA-256:	8F26FB9FA2CE3FE4C84AE2228C6102978FA1C128D7842AC6FD14043A3CDE2B27
SHA-512:	5A35C0141CAB50EAFD049AA3E86228B4684B24242882268837A6D1031A279F3C4969EC8C6A4229FFE4408AC69BE8274A85C0F3E26128CC33E8E374C1885F2725
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/009bfda37c5a61fdded1216f0c625394/tcc.min.js
Preview:	!function webpackUniversalModuleDefinition(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("tcc",[],t):"object"==typeof exports?exports["tcc"]=t():e["tcc"]=t()}(window,function(){return n=[function(e,t,n){"use strict";t.parseCookie=t.getPromoEventData=t.isSupported=t.isCorporateHost=t.iterateAncestors=t.isValidHrefElement=t.getWindow=t.getNavigator=t.getHost=t.getDocument=t.getClickEventData=t.getBaseHost=t.getAttributeFromElement=t.formatPageName=undefined;var r,o,i,a=n(1),s=(r="",o={document:n=Object.create({get cookie(){return r},set cookie(e){r=e}})},i={},"undefined"==typeof window?{window:o,document:n,navigator:i}:{window:window\|\|o,document:window.document\|\|n,navigator:navigator\|\|i}),c=function c(){return s.window},u=(function D(e){s.window=e\|\|{}},function u(){return s.document});(function T(e){e=e\|\|{};s.window.document=e,s.document=e});var d=function d(){return s.navigator},f=(function I(e){s.navigator=e\|\|{}},

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10713), with no line terminators
Category:	downloaded
Size (bytes):	10713
Entropy (8bit):	5.245954557581937
Encrypted:	false
SSDEEP:	192:UjgypkQ+RjJ7IJ8sD6Hg3uBw9fNiU4iQn:UjgcZ+dJE56sGUw
MD5:	139CB4EDDDC80B3081AC6BABDDF01F5F
SHA1:	249D4D946A287AA3C6A2F110F2F2C53AF2776747
SHA-256:	A32E516702A6808879B1B4ED8E7EEE5543AD117DCD51F568926D0FEEC1AEA5A2
SHA-512:	2761874B59749C3AF722765302B3240505A48EB5552D79F9CFFE3C2D758D3D5F53CCA6AE45BC0FCCB880132C5AAC65D5F6EA0915285D4B15F3C176A8CBE1F7C3
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/7811-2ad9807d7e8b31ed.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7811,8676,3157],{20187:function(e){e.exports=function(e,t){return null!=e&&t in Object(e)}},92602:function(e,t,n){var r=n(93759),a=n(95041);e.exports=function(e,t){return r(e,t,(function(t,n){return a(e,n)}))}},93759:function(e,t,n){var r=n(13324),a=n(82857),o=n(17297);e.exports=function(e,t,n){for(var u=-1,i=t.length,f={};++u<i;){var l=t[u],c=r(e,l);n(c,l)&&a(f,o(l,e),c)}return f}},82857:function(e,t,n){var r=n(60091),a=n(17297),o=n(39045),u=n(29259),i=n(33812);e.exports=function(e,t,n,f){if(!u(e))return e;for(var l=-1,c=(t=a(t,e)).length,s=c-1,d=e;null!=d&&++l<c;){var p=i(t[l]),v=n;if("__proto__"===p\|\|"constructor"===p\|\|"prototype"===p)return e;if(l!=s){var y=d[p];void 0===(v=f?f(y,p,d):void 0)&&(v=u(y)?y:o(t[l+1])?[]:{})}r(d,p,v),d=d[p]}return e}},51704:function(e,t,n){var r=n(52153),a=/^\s+/;e.exports=function(e){return e?e.slice(0,r(e)+1).replace(a,""):e}},1369:function(e,t,n){var r=n(17297),a=n(79631),o=n(86152),u=n(39045),

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 103388, version 1.0
Category:	downloaded
Size (bytes):	103388
Entropy (8bit):	7.997461157849692
Encrypted:	true
SSDEEP:	3072:o+fTVGPgUd4uGXEMFHGyOv6JYLTrdW+Qdt91:XVFUd4uyHGyU62TJQdZ
MD5:	FF3F79FC43D0BCFD04D8CAC73F56D8C7
SHA1:	0854A53B94336710DC505A459C66DAE72A73D6C7
SHA-256:	07D6825E414A3A09444251AE7DEF1C796ED2FCEFE9E1C0838ADAB86270D346FA
SHA-512:	0B96340FF74F2BF274E1E25A5E1F8045595C8687266EDE0007C9286E9C85B8B1DDD2B81A17DBDF3D73F0DB5AB006FE09124C190058E1E640A3FE4C6B2F2F6CC8
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-vf4.woff2
Preview:	wOF2............../....e..............................p..$?HVAR.T?MVAR.F.`?STAT$'8.../.H...T..=....0....6.$..0. ..6...[....9A.....N..o.h.Kw."..@.s.......1.g..DnV..D..Jz...'..1.........E......JUB...@...y.p..c..2...E.b,E^.BJEl.T...X.. vG.s..p..It..D...Vz......{qI..8...g.3.....l._...............)..``....<a..L.Tl..6'...;.........io..........0q]Z..QR=6$[}.gQ.\|.....+=g.c.R.J.......'...F.{.:..0..`....`.%Aa.p..R.I.#f..'Pc.Q..).Jz.t.Em.u<..a.....`.W.........E>...R.].........D."!...........Y.)..7.6._....-~.q^.^!.Q..UH.......9Nw.i.EE.EAb.3.-.~.l.J..$"L....M'...N.s.C.q..H.....[..[\|P....geD.\|.."_Vi.r.q.>.f...e.D.R.).."L..j...}..7...:n...,...:47...#K.'.?.M._..4...n.@.".n."<`.Bbkx...]-..+.1jT...).DI.......X.Ai."J..."..`.L`?O..{_g<fk....,.....R....z=.C..S.dE..L&3.....u..X.....)9..2Y...6F....)...66...<..+m........O.Vm..j.......t:...LP...P.....x........d...IX.#......h.+..Xt........3.y....2Tru29.......mV_....e"b$.$.i...1...{._.>.g.b2.....-.....z.Bh}

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10777), with no line terminators
Category:	downloaded
Size (bytes):	10777
Entropy (8bit):	5.091640809121367
Encrypted:	false
SSDEEP:	192:yPcIOa56vH/0QgPnSe4S53RP5QtdtNR7K/Y:0RfnR4pVd
MD5:	C2A35AC22B75FAF21B3070209405E1E4
SHA1:	0404AF5191F71CFA6B2F5F9E0C03B9760C48BDB3
SHA-256:	3D6D9BF9E52AE220FF8F11638ED166CBC739C74650712FEB5726684ED7DB5361
SHA-512:	B07CEF22D183C53052C452435C66F42B871E58841C390362D15DE98804503BC6E2EC42003327BC4ED66F7837097B2A2BC60503385A2B6D1E0658F058C660D8A2
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/css/6fafb289fc414ef8.css
Preview:	.ux-text{--uxText--fontSize0:var(--ux-1a61xr7,var(--ux-vvspv2,1rem));--uxText--fontSize-1:calc(var(--uxText--fontSize0) var(--ux-ol0703, /) var(--ux-7s4p3v, 1.125));--uxText--fontSize-2:calc(var(--uxText--fontSize-1) var(--ux-ol0703, /) var(--ux-7s4p3v, 1.125));--uxText--fontSize1:calc(var(--uxText--fontSize0) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize2:calc(var(--uxText--fontSize1) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize3:calc(var(--uxText--fontSize2) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize4:calc(var(--uxText--fontSize3) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--fontSize5:calc(var(--uxText--fontSize4) var(--ux-y4pg8z, ) var(--ux-7s4p3v, 1.125));--uxText--lineHeight:calc(var(--ux-14t1fes, var(--ux-1w31hux, 1.5)) var(--ux-1u3f284, ) var(--ux-51yj5o, 1));font-size:var(--uxText--fontSize0);line-height:var(--uxText--lineHeight);font-family:var(--ux-9pe28g,var(--ux-1067ph9,sans-serif));font-weight:var(--ux-v

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (378), with no line terminators
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	5.4955069976218525
Encrypted:	false
SSDEEP:	6:xWzP9WWIY3TjIY4FbPfpGEdV2BBlJPEDgJM7M+dpY9IY3TjIY4Fb3P/c+2BBlJP4:xWRIYjjIYC5G0uTCDgJM7H+IYjjIYCfl
MD5:	FF052E15D177BEE196A78F2C7547B566
SHA1:	C9F9B5E8AF54230C6EF7E9B6EECB52FEA2C35883
SHA-256:	82DE642A50C13C568D51A791F6C69D58D81B17D45F713415E388AEEABF8CFB0D
SHA-512:	AD9BED4D211229214FE1E16BFD9CDCFD710FDD7A4476D18C880A963451CC20AA61F95355A22D1E752C43F864C4114131FB5EBC28DC81D205C3D9A36AE23565A3
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww38.dev-lti.bncollge.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=617ad5fca51cd422:T=1697146197:RT=1697146197:S=ALNI_MZICuw8GLxQCbpJeOoWcKCC1O8FSw","_expires_":1730842197,"_path_":"/","_domain_":"bncollge.com","_version_":1},{"_value_":"UID=00000d990ff1fd57:T=1697146197:RT=1697146197:S=ALNI_MabLlKggifNVsRDHgrANZqYfugimA","_expires_":1730842197,"_path_":"/","_domain_":"bncollge.com","_version_":2}]});

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114619
Entropy (8bit):	5.214814863292182
Encrypted:	false
SSDEEP:	1536:M5kD/bYS/9Lnkpt6kXMcVODedxKy4hAS0Q:Mu/9GpIcVPx410Q
MD5:	73E104CFA0A55571128565162D4CE48B
SHA1:	4E46F9E51EFE1CC919402B5928D5F7BDB8844825
SHA-256:	B452C08C5D72B03956F0EC54EE1B3FC97E2B58BD3FB710002147DD2B60A17646
SHA-512:	F376320F9EA7F33B78465C02B2541DDF8D440603A6DC7845FE32EF286CEDE98EBE17D1C0AC8A4B761AD1A75C0459697FF3C459A6D3E6673D9B7512CCF7167A1E
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/73e104cfa0a55571128565162d4ce48b/uxcore2.min.js
Preview:	var umd;(()=>{"use strict";var e,t={1570:(e,t,r)=>{var n={};r.r(n),r.d(n,{Accordion:()=>a.Z,Alert:()=>o.Z,Button:()=>l.default,Collapsible:()=>s.Z,Dropdown:()=>i.default,Fieldset:()=>u.ZP,Growl:()=>d.ZP,MessageOverlay:()=>c.Z,Modal:()=>p.Z,Pagination:()=>f.Z,Pivots:()=>h.Z,ProgressBar:()=>b.Z,ProgressSteps:()=>m.ZP,Spinner:()=>y.Z,Table:()=>g.ZP,Tabs:()=>v.ZP,Text:()=>O.default,Toggle:()=>w.Z,Tooltip:()=>P.ZP,Validation:()=>E,request:()=>j.default,utils:()=>k,versions:()=>x});var a=r(232),o=r(4891),l=r(7132),s=r(1179),i=r(1902),u=r(4205),d=r(6088),c=r(5631),p=r(7907),f=r(9604),h=r(555),b=r(8557),m=r(4509),y=r(1970),g=r(527),v=r(5347),O=r(5523),w=r(8506),P=r(4951),j=r(7478),k=r(1202),E=r(1913);const x={"ux/uxcore2-extended-support":"2300.2.5"};k.registerKeyboardNavListener(),[k].forEach((function(e){Object.defineProperty(e,"__esModule",{value:!0})})),window.ux=window.ux\|\|{},Object.keys(n).forEach((e=>{window.ux[e]=n[e]}))},3668:(e,t,r)=>{r.r(t);var n=r(5466),a=r(6116),o=r(3074),l=r.n(o)

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7475)
Category:	downloaded
Size (bytes):	7976
Entropy (8bit):	5.501228474982835
Encrypted:	false
SSDEEP:	96:Z3j/Ly11W8kfxHCUsG9G9X6pV784f3W2jVns0jOZC22fqhy80n3ur1uMLnHBH35d:NjT/pzs6pV7JfhxlOZCLU03uZusnkRfa
MD5:	B2563E5FB594227775F47B899970F34C
SHA1:	E74EB38319A8BD72EA62B02196CD4E33581ED5A3
SHA-256:	ADFEE74703A611BDD7966176C56663F47821D436BB853DA729208E1B47FF66DC
SHA-512:	3972CC074B6AA352C45F754651BC32E84A4638FEDC1950206A4AF503F412649BCB79FBB795F063812E781F8DFD64391BD5C157CBAD372464841E71AA1442C11D
Malicious:	false
Reputation:	low
URL:	https://znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_cCpILcXLHy2kXOd
Preview:	(function(){if(typeof window.QSI==='undefined'){window.QSI={};}.var tempQSIConfig={"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","zoneId":"ZN_cCpILcXLHy2kXOd"};if(typeof window.QSI.config!=='undefined'&&typeof window.QSI.config==='object'){for(var attrname in tempQSIConfig){window.QSI.config[attrname]=tempQSIConfig[attrname];}}else{window.QSI.config=tempQSIConfig;}.window.QSI.shouldStripQueryParamsInQLoc=false;})();try{!function(e){function n(n){for(var o,i,r=n[0],a=n[1],d=0,c=[];d<r.length;d++)i=r[d],t[i]&&c.push(t[i][0]),t[i]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(l&&l(n);c.length;)c.shift()()}var o={},t={8:0};function i(e){var n=window.QSI.__webpack_get_script_src__,o=function(e){return r.p+""+({}[e]\|\|e)+"."+{0:"2d3ab6a09b46ea17e2a0",1:"1067388655e29f90041b",2:"427c5b9235ec3bb11938",3:"2e025eeeb5b861f45500",4:"dcfa31617

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-vf2.woff2
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ww38.dev-lti.bncollge.com/ls.php?t=65286552&token=b6682987fe9fb1fea8e96b18c4acb7ce6710a23b
Preview:	{"success":true}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/3.32.0/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53488), with no line terminators
Category:	downloaded
Size (bytes):	53488
Entropy (8bit):	5.270557127269645
Encrypted:	false
SSDEEP:	1536:b2mqixuGusBuEwj+mPdLgoPwJRtSJgrPqZ:3ugR4J6SZ
MD5:	F9E4702BF3F5B3899BFA369B08684696
SHA1:	FA8A282F2F592B2CFC30CA6C0A7F450812352B99
SHA-256:	365F3A442D8EA941482267D608A87F56CD9E65AC58A9583FF90054F280D1548D
SHA-512:	3C2657463EB1C845E2BF48F5A400D5606FE33F18DF82AFA078422D25B28EF1C63CA6DA1364F5266F87AC1BA8427F2F1D669F43323879E315B84A522CE0F5B18A
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/522-f9b6103fe2465caa.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[522],{2995:function(e,t,n){"use strict";n.r(t),n.d(t,{arrow:function(){return we},autoPlacement:function(){return k},autoUpdate:function(){return ye},computePosition:function(){return ge},detectOverflow:function(){return T},flip:function(){return A},getOverflowAncestors:function(){return ne},hide:function(){return L},inline:function(){return D},limitShift:function(){return z},offset:function(){return N},platform:function(){return he},shift:function(){return F},size:function(){return W},useFloating:function(){return Pe}});const r=["top","right","bottom","left"],o=["start","end"],i=r.reduce(((e,t)=>e.concat(t,t+"-"+o[0],t+"-"+o[1])),[]),l=Math.min,a=Math.max,u=Math.round,c=Math.floor,s=e=>({x:e,y:e}),f={left:"right",right:"left",bottom:"top",top:"bottom"},d={start:"end",end:"start"};function p(e,t,n){return a(e,l(t,n))}function m(e,t){return"function"===typeof e?e(t):e}function h(e){return e.split("-")[0]}function y(e){return e.spl

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3639), with no line terminators
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	5.300288217864481
Encrypted:	false
SSDEEP:	96:25BbUGTsDQDOafP7mmuXYVckVc6JYtGtQd8be90:25BbUBQhyoXO0tQd8bI0
MD5:	9BB7D3512926A6650686843A36DF1863
SHA1:	25918093C4A2AF6637F8A287B7B6DB9ABF95189C
SHA-256:	44267A2BC819EA6181DDCA42C6D77E90C17E09F4B3AC87AB61A20373C9DE3895
SHA-512:	8AD2A9262DBCBD081C91EFF1C61B7C7DA21839096070598F36EB1ED2449A0D3BF4C00DEE0040C0772B4E9D0B392A759DA1419791372B9D14BFF737DC2B06B902
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/forsale/_next/static/chunks/webpack-6ee710e4144e6a72.js
Preview:	!function(){"use strict";var e={},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var i=t[r]={id:r,loaded:!1,exports:{}},u=!0;try{e[r].call(i.exports,i,i.exports,n),u=!1}finally{u&&delete t[r]}return i.loaded=!0,i.exports}n.m=e,function(){var e=[];n.O=function(t,r,o,i){if(!r){var u=1/0;for(d=0;d<e.length;d++){r=e[d][0],o=e[d][1],i=e[d][2];for(var c=!0,a=0;a<r.length;a++)(!1&i\|\|u>=i)&&Object.keys(n.O).every((function(e){return n.O[e](r[a])}))?r.splice(a--,1):(c=!1,i<u&&(u=i));if(c){e.splice(d--,1);var f=o();void 0!==f&&(t=f)}}return t}i=i\|\|0;for(var d=e.length;d>0&&e[d-1][2]>i;d--)e[d]=e[d-1];e[d]=[r,o,i]}}(),n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,{a:t}),t},n.d=function(e,t){for(var r in t)n.o(t,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},n.f={},n.e=function(e){return Promise.all(Object.keys(n.f).reduce((function(t,r){return n.f[r](e,t),t}),[]))},n.u=function(e){return"static/chunks/"+e+".

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14786), with no line terminators
Category:	downloaded
Size (bytes):	14786
Entropy (8bit):	5.655653810928149
Encrypted:	false
SSDEEP:	192:d2S3jBYiDy8KHl07BRqlA/BTwLqVk5igvqvD/xdRrClVrXi4KISc6pF9ptZ/18UG:d2STBYiBKHl0CETiqTxdRmP09fgWg
MD5:	226BA5F7E2BBE1F760FE924959E2488A
SHA1:	E89FE121CAE5610C347EAC90E5153ABE310B142D
SHA-256:	349F06FACA6A49C04A12D90364DD328BDCEFC5981778E956A96090FC1CBB0CF6
SHA-512:	29CD1BD644EA5291FB59D75953ADEDA3BC1FAAA48478C97379C6000D31DCD3B89B66728333FC19AFE9E6208FD852A05BC464EDBF78C1B0A339E93F3FC4112EBD
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/8052-ca8152c5cab0d8ed.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8052],{94918:function(n,e,t){var r={"./ar_AE.json":[1317,139],"./da_DK.json":[73929,5495],"./de_AT.json":[70194,49],"./de_CH.json":[66120,4888],"./de_DE.json":[43255,7835],"./el_GR.json":[26701,4479],"./en_AE.json":[33449,2277],"./en_AU.json":[49956,3448],"./en_CA.json":[42841,7031],"./en_GB.json":[15851,9401],"./en_HK.json":[20092,6286],"./en_IE.json":[16731,8303],"./en_IL.json":[43546,2153],"./en_IN.json":[80368,1056],"./en_MY.json":[77746,8705],"./en_NZ.json":[10659,8107],"./en_PH.json":[57555,1893],"./en_PK.json":[30605,7552],"./en_SG.json":[23998,8449],"./en_US.json":[46371,8695],"./en_ZA.json":[22253,1605],"./es_AR.json":[76935,4289],"./es_CL.json":[71862,7384],"./es_CO.json":[82650,2514],"./es_ES.json":[16091,7916],"./es_MX.json":[47243,3505],"./es_PE.json":[82784,1877],"./es_US.json":[12975,2867],"./es_VE.json":[33890,7623],"./fi_FI.json":[64648,3758],"./fr_BE.json":[84146,2756],"./fr_CA.json":[67966,4933],"./fr_CH.json":

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.8054173408852705
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtXs1blEXsLqo40RWUnYN:VKEctKonR3evtTA8i1ScLrwUnG
MD5:	6EBA37B6375881721E086F90566D89C6
SHA1:	0BFC6A7482483269ED4CCC4B8486D4E150958575
SHA-256:	669127738C04B1074B227AD5BF263C92522B37DCAA62DAE7D46F2E8C6FC38EBA
SHA-512:	AD9ACABB1C73BFB14A397338FE67F07CAEDB6C6DF73F5133315DD908E621ECAA3DA91B708E15D66B2278145CD9493F02D30C901E258D5251ECE9346FDF6BC8DF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-lwJiw+OT2isqLl772nPjNV34ltQfNiSOLIjtbaIB

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28355), with no line terminators
Category:	downloaded
Size (bytes):	28355
Entropy (8bit):	5.250744667714498
Encrypted:	false
SSDEEP:	384:K/Enh4ynnZA+PJHcEffecGPO4g9I5ypAwLC:KIZ5PJHcEffqn5yu
MD5:	298604577ADD3F88EECBCB8707E40871
SHA1:	3A56F708393C4724EC252B508D470ECCD2BD0862
SHA-256:	ADB86C14A753D03B75A28A66562E3B853B7C5BBC3577D224E1D7ABC360838681
SHA-512:	10134A1A273F6A2CEDD65E054F307F2AB4B1DC544E7D5CA5B123D1752CD8903BAEF8D5A6AFB1B7499B016033331E48A5A3C83606B1112CEA9F129C9A82E64E3C
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/css/a62f34a15fe654b7.css
Preview:	.ux-label{display:block;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}.ux-label.ux-label--internal{pointer-events:none;transition:transform .218s ease;transform-origin:top left;transform:scale(1)}[dir=rtl] .ux-label.ux-label--internal{transform-origin:top right}.ux-label.ux-label--floating{transform:scale(.75) translateY(-50%)}.ux-label .ux-label-required{margin-inline-start:.25em;display:inline-block}[dir=rtl] .ux-label--internal{transform-origin:top right;text-align:right}.ux-text-entry-shell{--uxTextEntry-padding:calc(var(--ux-1sbfig8, .25rem) * 2);position:relative;flex:1;white-space:nowrap;text-overflow:ellipsis;overflow:hidden;padding:var(--uxTextEntry-padding);border:var(--uxButton--borderWidth,2px) solid transparent}.ux-text-entry-shell[data-size]:after{content:attr(data-size);visibility:hidden;white-space:pre}.ux-text-entry-shell .ux-label~.ux-text-entry-field{transform:translateY(var(--uxTextEntry-padding))}.ux-text-entry-field,.ux-text-entry-suggestion{display:fl

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/ux-assets/@ux/fonts/4.4.0/GDSherpa-regular.woff2
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/IPKydPNOo6nmoO2rQ5DFN/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8953), with no line terminators
Category:	downloaded
Size (bytes):	8953
Entropy (8bit):	5.441151292746668
Encrypted:	false
SSDEEP:	192:dNKqQhESAokuX7xbVitJXOZk3Agk7IXp3lrgRBn:fQeEk0bVyJXOZk47I53+J
MD5:	6AB94A1E9D6362DB7427A18457391A4C
SHA1:	54887D9A4C2C5269A8EB6F6A5C861A45E32F6ABD
SHA-256:	F7170983CB389D0516065E685EFD7C9FBF237203C3D7E8F1929479C6C1362865
SHA-512:	DD3A8FBE0C8EC74484CD2AC5769D403C68F3327C934DBDC5DB43D7B72C9C4FC40875549F9EE01651011ABEFBEC54B6EA35FDB1A7788759D9F3E4415E5488CB29
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/webpack-a416d65850590841.js
Preview:	!function(){"use strict";var e={},c={};function a(t){var n=c[t];if(void 0!==n)return n.exports;var o=c[t]={id:t,loaded:!1,exports:{}},f=!0;try{e[t].call(o.exports,o,o.exports,a),f=!1}finally{f&&delete c[t]}return o.loaded=!0,o.exports}a.m=e,function(){var e=[];a.O=function(c,t,n,o){if(!t){var f=1/0;for(i=0;i<e.length;i++){t=e[i][0],n=e[i][1],o=e[i][2];for(var r=!0,l=0;l<t.length;l++)(!1&o\|\|f>=o)&&Object.keys(a.O).every((function(e){return a.O[e](t[l])}))?t.splice(l--,1):(r=!1,o<f&&(f=o));if(r){e.splice(i--,1);var d=n();void 0!==d&&(c=d)}}return c}o=o\|\|0;for(var i=e.length;i>0&&e[i-1][2]>o;i--)e[i]=e[i-1];e[i]=[t,n,o]}}(),a.n=function(e){var c=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(c,{a:c}),c},function(){var e,c=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};a.t=function(t,n){if(1&n&&(t=this(t)),8&n)return t;if("object"===typeof t&&t){if(4&n&&t.__esModule)return t;if(16&n&&"function"===typeof t.the

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6354)
Category:	downloaded
Size (bytes):	88982
Entropy (8bit):	5.214125426954102
Encrypted:	false
SSDEEP:	768:zHHH4Bnzw1qNXdpvM+rc8943vJDXlAV3bsqvoi1hBSnSKWbIx9G9VQlsG6URHYkE:wZxf1leC+YkcuTfZKwDw
MD5:	155B3039E12C112008EACDAE63C64DF8
SHA1:	E80DB5A0B4E7396E29EE3FFD738D6472A09CB49A
SHA-256:	896B49AB162E65A1FFEEAE563B4FF7E3500C3C54BCF9B6515284EC65E10CD6F3
SHA-512:	76BB2A4E2025648CC5CA527064779B1CCF37F58D3350D92FCB4BF87415A97A93A7D02FB4D999F78CFFE3738860C338A6805896A7FAE45EBFE06F178A9560EC6C
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/wrhs/155b3039e12c112008eacdae63c64df8/noheader.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("prop-types"),require("react-intl").default,require("@ux/util").default,require("react-dom"),require("@ux/button").default,require("@ux/modal").default,require("@ux/spinner").default):"function"==typeof define&&define.amd?define("NoHeader",["react","prop-types","react-intl","@ux/util","react-dom","@ux/button","@ux/modal","@ux/spinner"],t):"object"==typeof exports?exports.NoHeader=t(require("react"),require("prop-types"),require("react-intl").default,require("@ux/util").default,require("react-dom"),require("@ux/button").default,require("@ux/modal").default,require("@ux/spinner").default):e.NoHeader=t(e.React,e.PropTypes,e.ux.intl,e.ux.utils,e.ReactDOM,e.ux.Button,e.ux.Modal,e.ux.Spinner)}(self,((e,t,r,n,o,i,s,a)=>(()=>{var u,l,c={"./node_modules/@godaddy/fetch/browser.js":./!**********************************************!\. !* ./node_modules/@godaddy/fetch/browser.js *!.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=f7fb5af606ac799ab1cf0b5647845fe9&traced=1&timestamp=1697146260036&corrid=1815462950&privatelabelid=497036&vs=visible&rand=598295391&sitename=www.afternic.com&page=%2Fforsale%2Ftrue&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Ftrue&agent=false&delegated=false&salessite=false&loadSource=gasket&server=ip-10-124-255-123.us-west-2.compute.internal&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=1280&browy=907&resx=1280&resy=1024&cdepth=24&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=3&has_consent=1&cv=3.46.21&client_name=tcc&same_site=none&hit_id=3f8fe162-f3d9-554b-9ec1-dc3c142273d5&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
URL:	http://c.parkingcrew.net/scripts/sale_form.js
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (787), with no line terminators
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	5.522448400137729
Encrypted:	false
SSDEEP:	12:+dbjqkYSsdvpqZyjvqFLouXJOd+038QrurfwKAB8MTcQVkWdtqnK6aWXYqj71o:ibjLn8vEZPcR7uzoB8f4k6tqn5djpo
MD5:	18AEFA97CA1BC0AA5BE65E6383E07E74
SHA1:	CF0DD5E87BBA8F0A06E5BFDED0BDB60C33BA538A
SHA-256:	A80D0DBD00E01D6A77FB5BF74AC021061B5C9B494C716DCDFEE9B31C870CE4AE
SHA-512:	0D6315912BB4BACF9E484819E50D4D913EE30BE381B0B253AC2539896C5DCE19CF22F8028EA29824508CFDC83AD17BEACEDC3F50BE6A7D57F2611E227DF8F30C
Malicious:	false
Reputation:	low
URL:	https://img6.wsimg.com/identity-static-assets/_next/static/chunks/framework-8b82e441bea91899.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{11837:function(e,r,o){o(4079);var t=o(83899),n=60103;if(r.Fragment=60107,"function"===typeof Symbol&&Symbol.for){var f=Symbol.for;n=f("react.element"),r.Fragment=f("react.fragment")}var _=t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED.ReactCurrentOwner,a=Object.prototype.hasOwnProperty,s={key:!0,ref:!0,__self:!0,__source:!0};function u(e,r,o){var t,f={},u=null,l=null;for(t in void 0!==o&&(u=""+o),void 0!==r.key&&(u=""+r.key),void 0!==r.ref&&(l=r.ref),r)a.call(r,t)&&!s.hasOwnProperty(t)&&(f[t]=r[t]);if(e&&e.defaultProps)for(t in r=e.defaultProps)void 0===f[t]&&(f[t]=r[t]);return{$$typeof:n,type:e,key:u,ref:l,props:f,_owner:_.current}}r.jsx=u,r.jsxs=u},52322:function(e,r,o){e.exports=o(11837)}}]);

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/api/v1/cart/count
Preview:	0

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/image.aspx?referrer=&trace_id=ef21900a3f397aae17020e7784534ad9&traced=1&timestamp=1697152232063&corrid=1782399796&privatelabelid=497036&vs=visible&rand=308532835&sitename=sso.afternic.com&page=%2Flogin&location=https%3A%2F%2Fsso.afternic.com%2Flogin%3Fiframe%3Dtrue%26hide_create_account%3Dtrue%26hide_federation_login%3Dtrue%26status%3D2%26app%3Dafternic-v2%26path%3D%252F%26port%3D&agent=false&delegated=false&salessite=false&loadSource=gasket&server=auth-ui-5ffd964ccf-dgz8w&page_level_properties=loadSource%2Cserver&event_type=page.request&hw=1&browx=644&browy=0&resx=1280&resy=1024&cdepth=24&querystring=%3Fiframe%3Dtrue%26hide_create_account%3Dtrue%26hide_federation_login%3Dtrue%26status%3D2%26app%3Dafternic-v2%26path%3D%252F%26port%3D&visitor_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&visit_guid=52c9583c-ca3e-4669-b58f-e19ddb8a2a6a&page_count=6&has_consent=1&cv=3.46.21&client_name=tcc&same_site=None&hit_id=8fd7bdfa-f743-56be-80fb-0ff70fb1e2b8&CookieTest=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51287), with no line terminators
Category:	downloaded
Size (bytes):	51287
Entropy (8bit):	5.38252329603532
Encrypted:	false
SSDEEP:	768:O2IYryHFdHe2JTGRYDcDe0PK2Kv4U0psYzQvXelfLgSFk0mKKjb4RXwHH:O2pKFdHe2J9GTj5fLtFkzP4RyH
MD5:	58FBF005790BAF28D24C1A1352E11E97
SHA1:	0E4393BFE1F81827CCA60DF913BBCD96E074CAA2
SHA-256:	07B25B5BD195FFFE12668ABC047942884E431E4C1CD3DF7BAD3666BF8D566D80
SHA-512:	E141DA9D60D85A86FBDC29945960B0681D085DAA265D7D8BC0D76B30D8371A0C1F38658F471BB9EEE886B835BB823EA16CF985FD947BA62E6C3A6AA21F45294A
Malicious:	false
Reputation:	low
URL:	https://www.afternic.com/fosv2/_next/static/chunks/7440-fe714ffb1f804fa6.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7440],{70938:function(t,e,a){var i={"./base":51033,"./base.js":51033,"./dev-private":81111,"./dev-private.js":81111,"./development":74729,"./development.js":74729,"./local":77471,"./local.js":77471,"./ote":10055,"./ote.js":10055,"./production":60766,"./production.js":60766,"./routes":28084,"./routes.js":28084,"./test":37770,"./test.js":37770};function s(t){var e=o(t);return a(e)}function o(t){if(!a.o(i,t)){var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e}return i[t]}s.keys=function(){return Object.keys(i)},s.resolve=o,t.exports=s,s.id=70938},21119:function(t,e,a){"use strict";var i=a(83899),s=a(32117),o=a.n(s),n=a(40939),r=a.n(n),c=a(88679),d=a(85893);e.Z=({icon:t=(0,d.jsx)(r(),{}),hover:e=!1,text:a,placement:s="top",ghost:n})=>{const{0:p,1:l}=(0,i.useState)(!1),m=(0,i.useRef)(null);return e?(0,d.jsxs)("span",{className:n?"help-tooltip-ghost d-flex justify-content-center align-items-center":"",onMou

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.779195623524136
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQK3K12WAeWaee:PLKdXNQKaIWXL
MD5:	68CB3B6003D6C3962178ABDAB0AA15B5
SHA1:	F5B8DEAB69773712316D081311384DABF82BBC1A
SHA-256:	5063A68A88966CFF9BAA3BF09BF0352E9C05164C66E9B4EF2C4D5453DC9E1CA7
SHA-512:	4CF2B1EC20D2FFE77156217AF03E3833F6DA8B5ECCEC65F3CF4BB9058EE70E1935D47AEFD0275042E60DB4BE38491F592435DC07FE5E6E28C81654B0BB91A52E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lLirU0na9roYU3wDDisGJEVT
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js');

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2023 23:29:46.405483007 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:46.407252073 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:46.514219999 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:46.936372042 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:47.248593092 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:47.842616081 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:29:47.842689991 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:29:47.842772961 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:29:47.842777014 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:47.842799902 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:47.842823029 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:47.857815027 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:49.060983896 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:51.268770933 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.268807888 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.268872023 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.269423962 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.269442081 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.270059109 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.270083904 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.270143032 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.270343065 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.270354033 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.592008114 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:51.642240047 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.642287970 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.642571926 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.642579079 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.642709970 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.642734051 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.643116951 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.643189907 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.643903971 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.643908978 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.643974066 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.645086050 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.645086050 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.645153999 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.645421028 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.645488024 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.645538092 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.645543098 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:51.645642996 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:51.645652056 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:51.748305082 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:51.748310089 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:52.001616955 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:52.001837969 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:52.002018929 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:52.002302885 CEST	49702	443	192.168.2.7	142.250.68.46
Oct 12, 2023 23:29:52.002340078 CEST	443	49702	142.250.68.46	192.168.2.7
Oct 12, 2023 23:29:52.036340952 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:52.036456108 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:52.036463976 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:52.036473036 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:52.036521912 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:52.037604094 CEST	49703	443	192.168.2.7	142.250.72.141
Oct 12, 2023 23:29:52.037616014 CEST	443	49703	142.250.72.141	192.168.2.7
Oct 12, 2023 23:29:52.964452028 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:52.964483023 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:52.964579105 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:52.964946985 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:52.964961052 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.007060051 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.007102966 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.007213116 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.007535934 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.007546902 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.309629917 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.310085058 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.310112000 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.310456038 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.310564995 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.311041117 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.311094046 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.312638998 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.312706947 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.312830925 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.312841892 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.347811937 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.348078966 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.348093033 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.348479033 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.348542929 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.349169970 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.349225044 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.349637985 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.349698067 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.361089945 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.393285990 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.393316031 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.437107086 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.721343040 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.721435070 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.721513033 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.722104073 CEST	49706	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:53.722120047 CEST	443	49706	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:53.914825916 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:53.997819901 CEST	49711	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.076118946 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.076416016 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.076772928 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.159892082 CEST	80	49711	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.160113096 CEST	49711	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.238235950 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.388101101 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.388150930 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.388289928 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.389277935 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.389295101 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.541722059 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541758060 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541775942 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541788101 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541822910 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541870117 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541872025 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.541954041 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.541960955 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.555185080 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:54.555272102 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:54.747626066 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.748028994 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.748058081 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.748929977 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.749064922 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.754132986 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.754195929 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.775021076 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:54.775084019 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:54.775155067 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:54.775804043 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:54.775823116 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:54.786662102 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:54.799618959 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.799645901 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:54.843776941 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:54.876995087 CEST	49715	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.104969025 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.105087996 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.129576921 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.131953955 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.131984949 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.133002043 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.133085012 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.137943983 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.138041019 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.138084888 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.182459116 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.186969995 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.186996937 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.195452929 CEST	80	49715	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.195552111 CEST	49715	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.232337952 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.423598051 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.423707962 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.484935999 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.484988928 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485045910 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485059023 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.485086918 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485121965 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485157013 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.485161066 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485173941 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.485210896 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.485969067 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:29:55.496706963 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.496787071 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.496798038 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.508754015 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.508836031 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.508845091 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.513963938 CEST	80	49715	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.520663023 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.520734072 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.520744085 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.565073967 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.565094948 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.612061977 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.657707930 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.663305998 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.663436890 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.663440943 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.663480997 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.663527966 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.675120115 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.687199116 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.687285900 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.687325001 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.687345028 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.687693119 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.699009895 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.711029053 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.711133003 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.711208105 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.711219072 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.711267948 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.723079920 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.735213041 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.735302925 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.735408068 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.735430002 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.735501051 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.741956949 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.742389917 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.745907068 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.756978035 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.757071018 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.757112026 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.757179976 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.757257938 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.767987967 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.778903008 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.778980970 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.779117107 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.779146910 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.779334068 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.787174940 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.790030956 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.800807953 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.800978899 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.801052094 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.801115990 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.801213980 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.829705000 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.833885908 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.833961964 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.833964109 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.834005117 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.834057093 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.837439060 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:55.837469101 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:55.837537050 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:55.839962006 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:55.839973927 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:55.842613935 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.850449085 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.850538969 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.850560904 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.850586891 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.850649118 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.858268023 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.866090059 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.866159916 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.866193056 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.867136955 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:29:55.873771906 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.873842955 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.873855114 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.873883009 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.873931885 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.881623983 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.889383078 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.889452934 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.889463902 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.889486074 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.889533043 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.897212982 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.904989958 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.905235052 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.905296087 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.909104109 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.909311056 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.909370899 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.916851044 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.917062998 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.917123079 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.924540043 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.924623013 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.924643993 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.932436943 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.932503939 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.932518959 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.940176010 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.940243006 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.940305948 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.947952032 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.948024035 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.948046923 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.948549032 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:29:55.948623896 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:29:55.956043005 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.956176043 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.956207037 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.963829994 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.963952065 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.963973999 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.978218079 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.978303909 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.978317976 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.978339911 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.978406906 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.985060930 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.992048979 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.992080927 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.992242098 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.992258072 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:55.992500067 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:55.998708010 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.002127886 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.002212048 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.002254963 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.008902073 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.008979082 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.008995056 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.013570070 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:56.013592005 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:56.015636921 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.015697002 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.015711069 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.019865990 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.019942045 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.019958973 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.023977041 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.024049044 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.024061918 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.028048992 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.028142929 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.028156042 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.032195091 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.032298088 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.032310009 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.036401987 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.036487103 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.036499023 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.040360928 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.040431976 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.040443897 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.044456959 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.044538021 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.044549942 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.048456907 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.048537016 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.048548937 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.052328110 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.052427053 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.052438974 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.058250904 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.058348894 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.058362961 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.062035084 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.062117100 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.062115908 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.062144995 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.062199116 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.065855026 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.069528103 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.069590092 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.069603920 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.073348999 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.073424101 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.073436022 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.073667049 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.073729038 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.083144903 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.083199024 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.083276987 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.083615065 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.083642960 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.106395960 CEST	49713	443	192.168.2.7	142.250.68.100
Oct 12, 2023 23:29:56.106452942 CEST	443	49713	142.250.68.100	192.168.2.7
Oct 12, 2023 23:29:56.116775036 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:29:56.125277996 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.181741953 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.181893110 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.215055943 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.215101004 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.215500116 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.264858007 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.287331104 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:56.401452065 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:29:56.441976070 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.442405939 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.442492008 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.442964077 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.442981958 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.443048954 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.443068027 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.443100929 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.497617006 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.497679949 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.512186050 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.512334108 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.528619051 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:56.528647900 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:56.528932095 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.560096025 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.560151100 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:29:56.611545086 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:29:56.611556053 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:29:56.615000010 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:56.615093946 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.648431063 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.663671970 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.694453955 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.753529072 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:56.811707973 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.811887980 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.812115908 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.822530985 CEST	49719	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:56.824970007 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:56.825115919 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.825115919 CEST	49716	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.825154066 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.825167894 CEST	443	49716	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.830301046 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:56.830384016 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:56.830463886 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:56.830894947 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:56.830931902 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:56.876482010 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.876529932 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.876823902 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.877233982 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:56.877248049 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:56.881820917 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.915046930 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:56.915272951 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:56.915414095 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:56.953344107 CEST	49724	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:56.983911991 CEST	80	49719	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:56.984015942 CEST	49719	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.043148041 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.043239117 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.043493986 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.060973883 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.061049938 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.061202049 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.076718092 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077115059 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077213049 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077275038 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077333927 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.077377081 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077426910 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.077514887 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077583075 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077641964 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077646017 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.077724934 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077766895 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077771902 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.077820063 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:29:57.077866077 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:29:57.114757061 CEST	80	49724	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.114876986 CEST	49724	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.147043943 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.147151947 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.188035011 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.188321114 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.188395977 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.189479113 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.189589977 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.190246105 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.190316916 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.190466881 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.190485954 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.204821110 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.207619905 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.207731009 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.210136890 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.210150003 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.210427999 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.212506056 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.236293077 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.254489899 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.443248034 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.443305016 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.443372965 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.459580898 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:29:57.459673882 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:29:57.548053980 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.548135996 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.548187017 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.559381008 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.559401035 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.559431076 CEST	49722	443	192.168.2.7	72.247.100.147
Oct 12, 2023 23:29:57.559436083 CEST	443	49722	72.247.100.147	192.168.2.7
Oct 12, 2023 23:29:57.938021898 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.938095093 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.938159943 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:57.938262939 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:57.938262939 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.088689089 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.091206074 CEST	49726	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.107980013 CEST	49721	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.108048916 CEST	443	49721	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.111974955 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:29:58.116415977 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.116463900 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.116522074 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.117078066 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.117094994 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.263070107 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.263165951 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.263412952 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.265398026 CEST	80	49726	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.265480995 CEST	49726	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.437653065 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438127995 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438244104 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438294888 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438322067 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.438364029 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438405037 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438410044 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.438555956 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438599110 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438602924 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.438637972 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438677073 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438683987 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.438756943 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:29:58.438803911 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:29:58.481790066 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.485337019 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.485399961 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.486624956 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.487057924 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.487205029 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.487266064 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.487520933 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.518045902 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:58.518125057 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:58.518176079 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:58.541388035 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.692230940 CEST	49707	443	192.168.2.7	103.224.182.240
Oct 12, 2023 23:29:58.692267895 CEST	443	49707	103.224.182.240	192.168.2.7
Oct 12, 2023 23:29:58.835496902 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835635900 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835725069 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835721970 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.835798025 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835880041 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835894108 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.835916996 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.835973978 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.835988045 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.844317913 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.844393969 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.902895927 CEST	49727	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.902935982 CEST	443	49727	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.932528973 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.932575941 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:58.932981968 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.932981968 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:58.933027983 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.287316084 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.291964054 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:59.291976929 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.292313099 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.292752981 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:59.292817116 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.293005943 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:59.293036938 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.665237904 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.665587902 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:29:59.665694952 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:59.667282104 CEST	49728	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:29:59.667295933 CEST	443	49728	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:00.513926983 CEST	80	49715	185.53.178.30	192.168.2.7
Oct 12, 2023 23:30:00.514106035 CEST	49715	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:30:00.722881079 CEST	80	49715	185.53.178.30	192.168.2.7
Oct 12, 2023 23:30:00.722997904 CEST	49715	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:30:01.093497038 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:30:01.260840893 CEST	49715	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:30:01.579371929 CEST	80	49715	185.53.178.30	192.168.2.7
Oct 12, 2023 23:30:01.651351929 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:01.651407003 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:01.651484013 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:01.651935101 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:01.651949883 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.006675959 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.055577993 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.309509993 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.309535027 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.310122013 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.310513020 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.310576916 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.310718060 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.310735941 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.701001883 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706531048 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706562996 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706653118 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.706676006 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706737041 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706756115 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.706762075 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.706800938 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.718125105 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.730153084 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.730227947 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.730242968 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.737580061 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.737663984 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.737669945 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.786797047 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.786812067 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.833697081 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.872126102 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.877933025 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.878006935 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.878021002 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.889919996 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.890019894 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.890026093 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.902050972 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.902261019 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.902286053 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.914068937 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.914278030 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.914304972 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.926103115 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.926337004 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.926345110 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.938138008 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.938327074 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.938333988 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.949315071 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.949398994 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.949500084 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.949508905 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.949551105 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.960498095 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.971551895 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.971637964 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.971657991 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.971667051 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.971707106 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.982743025 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.994231939 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.994354963 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.994453907 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:02.994463921 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:02.994515896 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.005116940 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.010848045 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.010935068 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.010942936 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.043454885 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.043566942 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.043579102 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.048180103 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.048377037 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.048382044 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.057526112 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.057624102 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.057641029 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.066272974 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.066344023 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.066358089 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.074394941 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.074445009 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.074450970 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.082715034 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.082830906 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.082853079 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.083028078 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.083089113 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.084180117 CEST	49730	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.084193945 CEST	443	49730	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:03.999834061 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:03.999883890 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.000021935 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.000339031 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.000353098 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.358733892 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.359061956 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.359091997 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.359601021 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.360059023 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.360146999 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.360215902 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.402473927 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.729734898 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.730088949 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.730194092 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.731247902 CEST	49734	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.731266022 CEST	443	49734	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.743956089 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.744100094 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.744185925 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.931432962 CEST	49712	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:04.931447983 CEST	443	49712	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:04.931890965 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:05.093519926 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:05.149215937 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.149277925 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.149528027 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.149686098 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.149699926 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.325347900 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:05.332077980 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:05.373301983 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:05.493684053 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:05.504360914 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.504684925 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.504709959 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.505034924 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.505413055 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.505462885 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.505608082 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.505625963 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.721107006 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:05.766158104 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:05.883296967 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.883332968 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.883356094 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.883383036 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.883383989 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.883409977 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.883428097 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.895073891 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.895229101 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.895241022 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.898143053 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.898340940 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.899142027 CEST	49737	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:05.899158001 CEST	443	49737	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:05.927658081 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:05.927861929 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:06.009310961 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 12, 2023 23:30:06.673883915 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:06.673949957 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:06.674038887 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:06.677566051 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:06.677582026 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:06.985141993 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:30:06.985142946 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:30:06.985142946 CEST	49700	443	192.168.2.7	104.98.116.138
Oct 12, 2023 23:30:07.049927950 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:30:07.147120953 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:30:07.147145033 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:30:07.147154093 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:30:07.147161007 CEST	443	49700	104.98.116.138	192.168.2.7
Oct 12, 2023 23:30:07.278656960 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:07.278932095 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:07.299287081 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:07.299304962 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:07.300251961 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:07.342390060 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.207834005 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.254452944 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597174883 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597213030 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597223997 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597270966 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597313881 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597368002 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.597379923 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597480059 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.597485065 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597553015 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.597553015 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.597557068 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597589016 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:08.597601891 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:08.597634077 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:09.060592890 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:09.060594082 CEST	49739	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:09.060638905 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:09.060653925 CEST	443	49739	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:10.742333889 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:30:10.742496014 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:30:11.338004112 CEST	49714	80	192.168.2.7	185.53.178.30
Oct 12, 2023 23:30:11.657010078 CEST	80	49714	185.53.178.30	192.168.2.7
Oct 12, 2023 23:30:18.153018951 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:18.153054953 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:18.153136969 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:18.153635025 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:18.153660059 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:18.715874910 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:18.759196043 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:18.965198994 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 12, 2023 23:30:19.081288099 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.081329107 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.082425117 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.082495928 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.212371111 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.212785006 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.213181019 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.213202000 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.265621901 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.396572113 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.396603107 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.396651030 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.396660089 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.396687031 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.396713972 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.396727085 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.397099972 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397110939 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397147894 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397162914 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.397173882 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397207022 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.397567987 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397631884 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.397641897 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.397686958 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.578711987 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.578811884 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.578814983 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.578867912 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.763262033 CEST	49772	443	192.168.2.7	13.110.38.63
Oct 12, 2023 23:30:19.763297081 CEST	443	49772	13.110.38.63	192.168.2.7
Oct 12, 2023 23:30:19.910670996 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:19.910733938 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:19.910824060 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:19.911093950 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:19.911108017 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.281158924 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.281635046 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.281698942 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.282871962 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.282970905 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.284123898 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.284193039 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.284272909 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.284291029 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.336990118 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.651161909 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651187897 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651195049 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651220083 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651233912 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651252985 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651278973 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.651316881 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.651339054 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.651381016 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.680454016 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.680517912 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.680578947 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.680655003 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.680694103 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.680721045 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.813499928 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.813565969 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.813734055 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.813808918 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.813853025 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.813889980 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.847299099 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.847315073 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.847436905 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.847501993 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.847697020 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.852157116 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.852225065 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.852227926 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.852278948 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.852440119 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.852480888 CEST	443	49777	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:20.852507114 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:20.852551937 CEST	49777	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.041152000 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.041163921 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.041213989 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.041682959 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.041698933 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.415719986 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.415870905 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.415888071 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.416359901 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.416613102 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.416682959 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.416697025 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.460221052 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.789443016 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789504051 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789524078 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789562941 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789572001 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.789597988 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789613962 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.789625883 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.789649010 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.789669991 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.804004908 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.804089069 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.804107904 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.804210901 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.804261923 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.804389954 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.804406881 CEST	443	49798	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.804429054 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.804461956 CEST	49798	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.809520960 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.809617996 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:22.809695005 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.810055017 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:22.810090065 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.176296949 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.176635981 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:23.176708937 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.177234888 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.177767992 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:23.177850962 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.177948952 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:23.218477011 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.525597095 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.525693893 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:23.525758982 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:23.526343107 CEST	49801	443	192.168.2.7	65.8.164.48
Oct 12, 2023 23:30:23.526369095 CEST	443	49801	65.8.164.48	192.168.2.7
Oct 12, 2023 23:30:24.948925018 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:24.948962927 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:24.949035883 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:24.950171947 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:24.950203896 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.346189022 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.346410990 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.346455097 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.348153114 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.348329067 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.349140882 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.349237919 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.349323034 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.349342108 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.397655010 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.700848103 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.701035023 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.701117992 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.701394081 CEST	49815	443	192.168.2.7	142.251.2.157
Oct 12, 2023 23:30:25.701431990 CEST	443	49815	142.251.2.157	192.168.2.7
Oct 12, 2023 23:30:25.867371082 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:25.867466927 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:25.867582083 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:25.868031025 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:25.868067026 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:25.868562937 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:25.868606091 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:25.868683100 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:25.868864059 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:25.868880033 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.221524000 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.221796989 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.221858025 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.222862005 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.222949028 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.223336935 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.223400116 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.223476887 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.223493099 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.235877991 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.236069918 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.236100912 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.237560034 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.237637997 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.237919092 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.238001108 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.238068104 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.238076925 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.266379118 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.281903982 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.598639965 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.598875999 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.598958969 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.599992990 CEST	49821	443	192.168.2.7	142.250.101.154
Oct 12, 2023 23:30:26.600018024 CEST	443	49821	142.250.101.154	192.168.2.7
Oct 12, 2023 23:30:26.608640909 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.608730078 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.608810902 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.612765074 CEST	49820	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.612828016 CEST	443	49820	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.786155939 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.786210060 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:26.786278963 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.787066936 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:26.787086964 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.143378973 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.144963026 CEST	80	49719	52.85.39.16	192.168.2.7
Oct 12, 2023 23:30:27.145051956 CEST	49719	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:30:27.167496920 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.167537928 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.169001102 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.169079065 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.169475079 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.169562101 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.169677019 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.169686079 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.217231989 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.379645109 CEST	49719	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:30:27.531722069 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.531836987 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.531897068 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.532493114 CEST	49822	443	192.168.2.7	142.250.188.228
Oct 12, 2023 23:30:27.532510996 CEST	443	49822	142.250.188.228	192.168.2.7
Oct 12, 2023 23:30:27.540981054 CEST	80	49719	52.85.39.16	192.168.2.7
Oct 12, 2023 23:30:28.439888000 CEST	80	49726	18.239.196.136	192.168.2.7
Oct 12, 2023 23:30:28.439971924 CEST	49726	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:30:29.335289001 CEST	49726	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:30:29.509612083 CEST	80	49726	18.239.196.136	192.168.2.7
Oct 12, 2023 23:30:36.839430094 CEST	49699	80	192.168.2.7	184.30.179.31
Oct 12, 2023 23:30:36.839502096 CEST	49698	443	192.168.2.7	184.30.178.114
Oct 12, 2023 23:30:37.003707886 CEST	80	49699	184.30.179.31	192.168.2.7
Oct 12, 2023 23:30:37.003787994 CEST	49699	80	192.168.2.7	184.30.179.31
Oct 12, 2023 23:30:37.041918039 CEST	443	49698	184.30.178.114	192.168.2.7
Oct 12, 2023 23:30:37.082926035 CEST	443	49698	184.30.178.114	192.168.2.7
Oct 12, 2023 23:30:37.082946062 CEST	443	49698	184.30.178.114	192.168.2.7
Oct 12, 2023 23:30:37.083049059 CEST	49698	443	192.168.2.7	184.30.178.114
Oct 12, 2023 23:30:37.083079100 CEST	49698	443	192.168.2.7	184.30.178.114
Oct 12, 2023 23:30:39.170191050 CEST	49711	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:39.331660032 CEST	80	49711	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:41.561789989 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:30:41.561824083 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:30:42.087030888 CEST	49718	80	192.168.2.7	52.85.39.16
Oct 12, 2023 23:30:42.119030952 CEST	49724	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:42.248680115 CEST	80	49718	52.85.39.16	192.168.2.7
Oct 12, 2023 23:30:42.280342102 CEST	80	49724	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:43.444684982 CEST	49725	80	192.168.2.7	18.239.196.136
Oct 12, 2023 23:30:43.618972063 CEST	80	49725	18.239.196.136	192.168.2.7
Oct 12, 2023 23:30:45.645896912 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:45.645931005 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:45.646007061 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:45.646692038 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:45.646703005 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.248009920 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.248126030 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.252347946 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.252357006 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.252614975 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.277034044 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.318454027 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827691078 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827752113 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827794075 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827914953 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.827914953 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.827934980 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827954054 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.827996969 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.828003883 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.828035116 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.828174114 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.828227043 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.828227997 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.834887981 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.834887981 CEST	49827	443	192.168.2.7	20.114.59.183
Oct 12, 2023 23:30:46.834906101 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:46.834916115 CEST	443	49827	20.114.59.183	192.168.2.7
Oct 12, 2023 23:30:50.335783005 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:50.497318983 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:50.733828068 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:50.895205975 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:54.209512949 CEST	80	49711	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:54.209681034 CEST	49711	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:54.252911091 CEST	49711	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:54.253333092 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:54.253396988 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.253520012 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:54.253726959 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:54.253746033 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.414650917 CEST	80	49711	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:54.617408991 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.618582010 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:54.618607998 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.619138002 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.621915102 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:54.621982098 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:30:54.673974037 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:30:57.166085958 CEST	80	49724	13.248.148.254	192.168.2.7
Oct 12, 2023 23:30:57.166177034 CEST	49724	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:57.758753061 CEST	49724	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:30:57.758891106 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:30:57.759140015 CEST	443	49717	142.250.188.238	192.168.2.7
Oct 12, 2023 23:30:57.759222984 CEST	49717	443	192.168.2.7	142.250.188.238
Oct 12, 2023 23:30:57.920228004 CEST	80	49724	13.248.148.254	192.168.2.7
Oct 12, 2023 23:31:04.625669003 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:31:04.625751019 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:31:04.625811100 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:31:04.827492952 CEST	49829	443	192.168.2.7	142.250.176.4
Oct 12, 2023 23:31:04.827527046 CEST	443	49829	142.250.176.4	192.168.2.7
Oct 12, 2023 23:31:05.326340914 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:31:05.326452017 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:31:05.723592043 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:31:05.723826885 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:31:06.114886045 CEST	49723	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:31:06.115073919 CEST	49710	80	192.168.2.7	13.248.148.254
Oct 12, 2023 23:31:06.276139021 CEST	80	49723	13.248.148.254	192.168.2.7
Oct 12, 2023 23:31:06.276197910 CEST	80	49710	13.248.148.254	192.168.2.7
Oct 12, 2023 23:31:06.402179003 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.402216911 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.402257919 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.402647018 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.402671099 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.406301022 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.406339884 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.406399012 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.406663895 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.406677008 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.747606039 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.747885942 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.747910023 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.749488115 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.749639034 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.750721931 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.750806093 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.751018047 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.751027107 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.754714012 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.754893064 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.754920006 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.756349087 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.756407022 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.756691933 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.756757021 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:06.864378929 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.864384890 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:06.864387989 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.029489994 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.114072084 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114142895 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114197969 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.114219904 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114320040 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114362955 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.114368916 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114484072 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114521027 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114523888 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.114532948 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.114568949 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.114573002 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115118027 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115164042 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.115168095 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115206957 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115247011 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115263939 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.115268946 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.115300894 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.116132975 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.116229057 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.116281986 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.116286039 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.116991997 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117031097 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.117034912 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117115021 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117156982 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.117160082 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117885113 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117925882 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117942095 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.117945910 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.117978096 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.117981911 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.118746996 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.118788004 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.118791103 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.118803978 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.118844032 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.118848085 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.119709969 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.119746923 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.119750977 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.119760990 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.119796038 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.120520115 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.120604038 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.120644093 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.120647907 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121494055 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121536016 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.121540070 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121593952 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121627092 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121640921 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.121644974 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.121675014 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.122625113 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.122723103 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.122773886 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.122777939 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.122833014 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:07.122896910 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.930286884 CEST	49870	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:07.930320024 CEST	443	49870	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:21.737544060 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:21.737618923 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:21.737696886 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:21.777076960 CEST	49871	443	192.168.2.7	104.16.124.175
Oct 12, 2023 23:31:21.777101994 CEST	443	49871	104.16.124.175	192.168.2.7
Oct 12, 2023 23:31:22.089155912 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.089205027 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.089282036 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.089478970 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.089508057 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.485375881 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.485755920 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.485786915 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.486284971 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.486346960 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.487298012 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.491159916 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.492083073 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.492207050 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.492312908 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.492321968 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.538517952 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.859117985 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.859219074 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.859330893 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.860186100 CEST	49954	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.860207081 CEST	443	49954	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.861244917 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.861284971 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:22.861355066 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.861717939 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:22.861728907 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.250519991 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.259473085 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.259509087 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.259855986 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.259915113 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.260519981 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.260562897 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.267374992 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.267438889 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.267863989 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.267887115 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.268059969 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.268085003 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.632916927 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.633011103 CEST	443	49955	44.234.208.169	192.168.2.7
Oct 12, 2023 23:31:23.633063078 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.633985996 CEST	49955	443	192.168.2.7	44.234.208.169
Oct 12, 2023 23:31:23.634011984 CEST	443	49955	44.234.208.169	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 12, 2023 23:29:51.105839014 CEST	52764	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:51.106096029 CEST	56042	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:51.106601000 CEST	53266	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:51.106834888 CEST	51954	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:51.252362967 CEST	53	58196	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:51.267873049 CEST	53	52764	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:51.267894030 CEST	53	56042	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:51.268903017 CEST	53	53266	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:51.268918991 CEST	53	51954	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:52.214179039 CEST	53	62451	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:52.788116932 CEST	53811	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:52.788685083 CEST	59246	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:52.961978912 CEST	53	53811	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:52.963778973 CEST	53	59246	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:53.725223064 CEST	49172	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:53.725413084 CEST	57481	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:53.903989077 CEST	53	49172	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:53.914143085 CEST	53	57481	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.202491045 CEST	55364	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.202821016 CEST	59456	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.364929914 CEST	53	59456	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.365021944 CEST	53	55364	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.609608889 CEST	52155	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.610321045 CEST	52446	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.611319065 CEST	61829	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.611819983 CEST	51029	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:54.773616076 CEST	53	61829	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.773943901 CEST	53	51029	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.783926010 CEST	53	52155	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:54.785048962 CEST	53	52446	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:55.918673992 CEST	49331	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:55.918970108 CEST	63569	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.080545902 CEST	53	49331	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.081598997 CEST	53	63569	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.550695896 CEST	64314	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.551366091 CEST	56757	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.666825056 CEST	64080	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.667431116 CEST	55521	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.691193104 CEST	64581	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.692187071 CEST	59728	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:56.716550112 CEST	53	56757	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.726118088 CEST	53	64314	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.829106092 CEST	53	64080	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.829454899 CEST	53	55521	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.879302025 CEST	53	64581	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:56.881225109 CEST	53	59728	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:57.820156097 CEST	63400	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:57.820511103 CEST	49536	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:29:57.984596014 CEST	53	49536	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:57.994548082 CEST	53	63400	1.1.1.1	192.168.2.7
Oct 12, 2023 23:29:59.837116957 CEST	53	62610	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:01.946388960 CEST	123	123	192.168.2.7	40.119.6.228
Oct 12, 2023 23:30:01.971128941 CEST	53	60877	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:02.144596100 CEST	123	123	40.119.6.228	192.168.2.7
Oct 12, 2023 23:30:04.152293921 CEST	53	50411	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:04.813558102 CEST	53	61928	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:09.370291948 CEST	53	59257	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:13.409262896 CEST	50788	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:13.409964085 CEST	56440	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:14.805633068 CEST	51944	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:14.806241035 CEST	60310	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:17.923295975 CEST	60400	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:17.923815012 CEST	52956	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:18.085540056 CEST	53	60400	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:18.086270094 CEST	53	52956	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:18.219126940 CEST	63130	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:18.219616890 CEST	59586	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.745814085 CEST	52721	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.746022940 CEST	61173	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.756094933 CEST	51773	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.756582022 CEST	59783	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.909754992 CEST	53	52721	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:19.909878969 CEST	53	61173	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:19.971625090 CEST	52878	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:19.971812010 CEST	53077	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:21.543786049 CEST	58660	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:21.543950081 CEST	65528	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:22.109244108 CEST	64105	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:22.109419107 CEST	57105	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:22.674823999 CEST	53	63952	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:22.971062899 CEST	53	54742	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:24.785427094 CEST	52894	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:24.785669088 CEST	62144	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:24.947302103 CEST	53	52894	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:24.948307037 CEST	53	62144	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:25.704111099 CEST	54431	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:25.704355001 CEST	64748	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:25.705374002 CEST	50950	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:25.705667019 CEST	49483	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:25.866137981 CEST	53	54431	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:25.866688967 CEST	53	64748	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:25.867583990 CEST	53	50950	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:25.867836952 CEST	53	49483	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:26.622044086 CEST	58870	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:26.623078108 CEST	56728	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:30:26.784094095 CEST	53	58870	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:26.785212040 CEST	53	56728	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:28.236511946 CEST	53	63873	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:49.897916079 CEST	53	50518	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:51.184623957 CEST	53	64422	1.1.1.1	192.168.2.7
Oct 12, 2023 23:30:56.084882021 CEST	138	138	192.168.2.7	192.168.2.255
Oct 12, 2023 23:31:02.857785940 CEST	64116	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:02.858208895 CEST	50001	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:06.130458117 CEST	50326	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:06.131083965 CEST	57882	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:06.136837006 CEST	57334	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:06.137238979 CEST	54108	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:06.292220116 CEST	53	50326	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:06.292659998 CEST	53	57882	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:08.214283943 CEST	53616	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:08.214538097 CEST	50779	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:09.155412912 CEST	56008	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:09.155750990 CEST	55397	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:09.346688032 CEST	61577	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:09.346904039 CEST	60263	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:11.696913004 CEST	60598	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:11.697181940 CEST	62480	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:11.859724045 CEST	53	62480	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:12.654918909 CEST	57492	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:12.655289888 CEST	55172	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:12.817364931 CEST	53	55172	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:12.855334997 CEST	62425	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:12.855482101 CEST	54002	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:16.020646095 CEST	56483	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:16.021105051 CEST	50968	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:17.321336985 CEST	55128	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:17.321433067 CEST	60118	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:17.483414888 CEST	53	60118	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:18.352588892 CEST	53	65306	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:18.791743040 CEST	53	51242	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:19.389513016 CEST	59623	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:19.389797926 CEST	53320	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:19.552000999 CEST	53	59623	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:19.552674055 CEST	53	53320	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:19.638241053 CEST	61223	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:19.638411999 CEST	60140	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:20.140522003 CEST	63165	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:20.140717983 CEST	55440	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:20.151148081 CEST	55980	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:20.151352882 CEST	61357	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:21.925358057 CEST	49907	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:21.925484896 CEST	61759	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:22.088315964 CEST	53	61759	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:22.088393927 CEST	53	49907	1.1.1.1	192.168.2.7
Oct 12, 2023 23:31:24.566704035 CEST	63593	53	192.168.2.7	1.1.1.1
Oct 12, 2023 23:31:24.566817045 CEST	55005	53	192.168.2.7	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 12, 2023 23:29:51.105839014 CEST	192.168.2.7	1.1.1.1	0x3f16	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:51.106096029 CEST	192.168.2.7	1.1.1.1	0x530	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:51.106601000 CEST	192.168.2.7	1.1.1.1	0xc0b6	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:51.106834888 CEST	192.168.2.7	1.1.1.1	0x2a82	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:52.788116932 CEST	192.168.2.7	1.1.1.1	0x9a63	Standard query (0)	dev-lti.bncollge.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:52.788685083 CEST	192.168.2.7	1.1.1.1	0x623e	Standard query (0)	dev-lti.bncollge.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:53.725223064 CEST	192.168.2.7	1.1.1.1	0x9321	Standard query (0)	ww38.dev-lti.bncollge.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:53.725413084 CEST	192.168.2.7	1.1.1.1	0xdbef	Standard query (0)	ww38.dev-lti.bncollge.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:54.202491045 CEST	192.168.2.7	1.1.1.1	0xde73	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:54.202821016 CEST	192.168.2.7	1.1.1.1	0x53a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:54.609608889 CEST	192.168.2.7	1.1.1.1	0x26c2	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:54.610321045 CEST	192.168.2.7	1.1.1.1	0xf31c	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Oct 12, 2023 23:29:54.611319065 CEST	192.168.2.7	1.1.1.1	0x9a70	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:54.611819983 CEST	192.168.2.7	1.1.1.1	0x8370	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:55.918673992 CEST	192.168.2.7	1.1.1.1	0x396e	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:55.918970108 CEST	192.168.2.7	1.1.1.1	0xa30d	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:56.550695896 CEST	192.168.2.7	1.1.1.1	0x54a6	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.551366091 CEST	192.168.2.7	1.1.1.1	0xdd3b	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 12, 2023 23:29:56.666825056 CEST	192.168.2.7	1.1.1.1	0x4a36	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.667431116 CEST	192.168.2.7	1.1.1.1	0x306b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:56.691193104 CEST	192.168.2.7	1.1.1.1	0xb8b	Standard query (0)	ww38.dev-lti.bncollge.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.692187071 CEST	192.168.2.7	1.1.1.1	0x671a	Standard query (0)	ww38.dev-lti.bncollge.com	65	IN (0x0001)	false
Oct 12, 2023 23:29:57.820156097 CEST	192.168.2.7	1.1.1.1	0x127e	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:57.820511103 CEST	192.168.2.7	1.1.1.1	0x2a44	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:13.409262896 CEST	192.168.2.7	1.1.1.1	0xe557	Standard query (0)	www.afternic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:13.409964085 CEST	192.168.2.7	1.1.1.1	0xd5c1	Standard query (0)	www.afternic.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:14.805633068 CEST	192.168.2.7	1.1.1.1	0xabd1	Standard query (0)	img6.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:14.806241035 CEST	192.168.2.7	1.1.1.1	0xe02e	Standard query (0)	img6.wsimg.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:17.923295975 CEST	192.168.2.7	1.1.1.1	0x5a84	Standard query (0)	service.force.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:17.923815012 CEST	192.168.2.7	1.1.1.1	0x1568	Standard query (0)	service.force.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:18.219126940 CEST	192.168.2.7	1.1.1.1	0x7683	Standard query (0)	ds-aksb-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.219616890 CEST	192.168.2.7	1.1.1.1	0xa69b	Standard query (0)	ds-aksb-a.akamaihd.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:19.745814085 CEST	192.168.2.7	1.1.1.1	0x67be	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.746022940 CEST	192.168.2.7	1.1.1.1	0x33e0	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:19.756094933 CEST	192.168.2.7	1.1.1.1	0xcfa8	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.756582022 CEST	192.168.2.7	1.1.1.1	0x89d8	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:19.971625090 CEST	192.168.2.7	1.1.1.1	0x228e	Standard query (0)	csp.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.971812010 CEST	192.168.2.7	1.1.1.1	0x15b6	Standard query (0)	csp.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:21.543786049 CEST	192.168.2.7	1.1.1.1	0x2301	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:21.543950081 CEST	192.168.2.7	1.1.1.1	0x736d	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:22.109244108 CEST	192.168.2.7	1.1.1.1	0x1cf	Standard query (0)	www.afternic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:22.109419107 CEST	192.168.2.7	1.1.1.1	0x19e4	Standard query (0)	www.afternic.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:24.785427094 CEST	192.168.2.7	1.1.1.1	0x3c64	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:24.785669088 CEST	192.168.2.7	1.1.1.1	0xf97b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:25.704111099 CEST	192.168.2.7	1.1.1.1	0x996	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.704355001 CEST	192.168.2.7	1.1.1.1	0x6037	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:30:25.705374002 CEST	192.168.2.7	1.1.1.1	0xd12b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.705667019 CEST	192.168.2.7	1.1.1.1	0xa29b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 12, 2023 23:30:26.622044086 CEST	192.168.2.7	1.1.1.1	0xa8b6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:26.623078108 CEST	192.168.2.7	1.1.1.1	0xf9a0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:02.857785940 CEST	192.168.2.7	1.1.1.1	0xb564	Standard query (0)	i66819100-ds-aksb-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:02.858208895 CEST	192.168.2.7	1.1.1.1	0x46ec	Standard query (0)	i66819100-ds-aksb-a.akamaihd.net	65	IN (0x0001)	false
Oct 12, 2023 23:31:06.130458117 CEST	192.168.2.7	1.1.1.1	0x454a	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.131083965 CEST	192.168.2.7	1.1.1.1	0x2fd7	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:06.136837006 CEST	192.168.2.7	1.1.1.1	0xc1cc	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.137238979 CEST	192.168.2.7	1.1.1.1	0x3499	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:08.214283943 CEST	192.168.2.7	1.1.1.1	0x8aa1	Standard query (0)	gui.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:08.214538097 CEST	192.168.2.7	1.1.1.1	0x5366	Standard query (0)	gui.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:31:09.155412912 CEST	192.168.2.7	1.1.1.1	0x1349	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:09.155750990 CEST	192.168.2.7	1.1.1.1	0xb28	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:09.346688032 CEST	192.168.2.7	1.1.1.1	0x72a6	Standard query (0)	gui.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:09.346904039 CEST	192.168.2.7	1.1.1.1	0xe217	Standard query (0)	gui.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:31:11.696913004 CEST	192.168.2.7	1.1.1.1	0xedae	Standard query (0)	znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:11.697181940 CEST	192.168.2.7	1.1.1.1	0xba7f	Standard query (0)	znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:12.654918909 CEST	192.168.2.7	1.1.1.1	0x9fb9	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:12.655289888 CEST	192.168.2.7	1.1.1.1	0x2620	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:12.855334997 CEST	192.168.2.7	1.1.1.1	0xf375	Standard query (0)	sso.afternic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:12.855482101 CEST	192.168.2.7	1.1.1.1	0x65b1	Standard query (0)	sso.afternic.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:16.020646095 CEST	192.168.2.7	1.1.1.1	0x49b1	Standard query (0)	img6.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:16.021105051 CEST	192.168.2.7	1.1.1.1	0xf662	Standard query (0)	img6.wsimg.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:17.321336985 CEST	192.168.2.7	1.1.1.1	0x23da	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:17.321433067 CEST	192.168.2.7	1.1.1.1	0x608b	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:19.389513016 CEST	192.168.2.7	1.1.1.1	0xfb9d	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:19.389797926 CEST	192.168.2.7	1.1.1.1	0x6ed2	Standard query (0)	clients1.google.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:19.638241053 CEST	192.168.2.7	1.1.1.1	0x82e3	Standard query (0)	sso.afternic.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:19.638411999 CEST	192.168.2.7	1.1.1.1	0xffd3	Standard query (0)	sso.afternic.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:20.140522003 CEST	192.168.2.7	1.1.1.1	0x9beb	Standard query (0)	csp.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:20.140717983 CEST	192.168.2.7	1.1.1.1	0x8637	Standard query (0)	csp.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:31:20.151148081 CEST	192.168.2.7	1.1.1.1	0x7bdb	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:20.151352882 CEST	192.168.2.7	1.1.1.1	0xbff4	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Oct 12, 2023 23:31:21.925358057 CEST	192.168.2.7	1.1.1.1	0x73ec	Standard query (0)	55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:21.925484896 CEST	192.168.2.7	1.1.1.1	0xb98d	Standard query (0)	55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com	65	IN (0x0001)	false
Oct 12, 2023 23:31:24.566704035 CEST	192.168.2.7	1.1.1.1	0x3565	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:24.566817045 CEST	192.168.2.7	1.1.1.1	0xe85	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 12, 2023 23:29:51.267873049 CEST	1.1.1.1	192.168.2.7	0x3f16	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:51.267873049 CEST	1.1.1.1	192.168.2.7	0x3f16	No error (0)	clients.l.google.com		142.250.68.46	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:51.267894030 CEST	1.1.1.1	192.168.2.7	0x530	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:51.268903017 CEST	1.1.1.1	192.168.2.7	0xc0b6	No error (0)	accounts.google.com		142.250.72.141	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:52.961978912 CEST	1.1.1.1	192.168.2.7	0x9a63	No error (0)	dev-lti.bncollge.com		103.224.182.240	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:53.903989077 CEST	1.1.1.1	192.168.2.7	0x9321	No error (0)	ww38.dev-lti.bncollge.com	034717.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:53.903989077 CEST	1.1.1.1	192.168.2.7	0x9321	No error (0)	034717.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:53.903989077 CEST	1.1.1.1	192.168.2.7	0x9321	No error (0)	034717.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:53.914143085 CEST	1.1.1.1	192.168.2.7	0xdbef	No error (0)	ww38.dev-lti.bncollge.com	034717.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:54.364929914 CEST	1.1.1.1	192.168.2.7	0x53a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2023 23:29:54.365021944 CEST	1.1.1.1	192.168.2.7	0xde73	No error (0)	www.google.com		142.250.176.4	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:54.773616076 CEST	1.1.1.1	192.168.2.7	0x9a70	No error (0)	www.google.com		142.250.68.100	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:54.773943901 CEST	1.1.1.1	192.168.2.7	0x8370	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2023 23:29:54.783926010 CEST	1.1.1.1	192.168.2.7	0x26c2	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.080545902 CEST	1.1.1.1	192.168.2.7	0x396e	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:56.080545902 CEST	1.1.1.1	192.168.2.7	0x396e	No error (0)	www3.l.google.com		142.250.188.238	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.081598997 CEST	1.1.1.1	192.168.2.7	0xa30d	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:56.726118088 CEST	1.1.1.1	192.168.2.7	0x54a6	No error (0)	d38psrni17bvxu.cloudfront.net		52.85.39.16	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.726118088 CEST	1.1.1.1	192.168.2.7	0x54a6	No error (0)	d38psrni17bvxu.cloudfront.net		52.85.39.123	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.726118088 CEST	1.1.1.1	192.168.2.7	0x54a6	No error (0)	d38psrni17bvxu.cloudfront.net		52.85.39.114	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.726118088 CEST	1.1.1.1	192.168.2.7	0x54a6	No error (0)	d38psrni17bvxu.cloudfront.net		52.85.39.75	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.829106092 CEST	1.1.1.1	192.168.2.7	0x4a36	No error (0)	www.google.com		142.250.176.4	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.829454899 CEST	1.1.1.1	192.168.2.7	0x306b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2023 23:29:56.879302025 CEST	1.1.1.1	192.168.2.7	0xb8b	No error (0)	ww38.dev-lti.bncollge.com	034717.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:56.879302025 CEST	1.1.1.1	192.168.2.7	0xb8b	No error (0)	034717.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.879302025 CEST	1.1.1.1	192.168.2.7	0xb8b	No error (0)	034717.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:56.881225109 CEST	1.1.1.1	192.168.2.7	0x671a	No error (0)	ww38.dev-lti.bncollge.com	034717.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:29:57.994548082 CEST	1.1.1.1	192.168.2.7	0x127e	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.196.136	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:57.994548082 CEST	1.1.1.1	192.168.2.7	0x127e	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.196.5	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:57.994548082 CEST	1.1.1.1	192.168.2.7	0x127e	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.196.64	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:29:57.994548082 CEST	1.1.1.1	192.168.2.7	0x127e	No error (0)	d38psrni17bvxu.cloudfront.net		18.239.196.138	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:13.574033976 CEST	1.1.1.1	192.168.2.7	0xd5c1	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:13.581587076 CEST	1.1.1.1	192.168.2.7	0xe557	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:14.968274117 CEST	1.1.1.1	192.168.2.7	0xe02e	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:14.969197035 CEST	1.1.1.1	192.168.2.7	0xabd1	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.38.63	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.39.66	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.36.191	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.36.63	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.38.66	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.085540056 CEST	1.1.1.1	192.168.2.7	0x5a84	No error (0)	location.l.force.com		13.110.36.194	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:18.086270094 CEST	1.1.1.1	192.168.2.7	0x1568	No error (0)	service.force.com	location.force.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.086270094 CEST	1.1.1.1	192.168.2.7	0x1568	No error (0)	location.force.com	location.l.force.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.381989002 CEST	1.1.1.1	192.168.2.7	0x7683	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:18.382221937 CEST	1.1.1.1	192.168.2.7	0xa69b	No error (0)	ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909754992 CEST	1.1.1.1	192.168.2.7	0x67be	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909754992 CEST	1.1.1.1	192.168.2.7	0x67be	No error (0)	dzfq4ouujrxm8.cloudfront.net		65.8.164.48	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909754992 CEST	1.1.1.1	192.168.2.7	0x67be	No error (0)	dzfq4ouujrxm8.cloudfront.net		65.8.164.51	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909754992 CEST	1.1.1.1	192.168.2.7	0x67be	No error (0)	dzfq4ouujrxm8.cloudfront.net		65.8.164.54	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909754992 CEST	1.1.1.1	192.168.2.7	0x67be	No error (0)	dzfq4ouujrxm8.cloudfront.net		65.8.164.84	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:19.909878969 CEST	1.1.1.1	192.168.2.7	0x33e0	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:19.921616077 CEST	1.1.1.1	192.168.2.7	0x89d8	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:19.922072887 CEST	1.1.1.1	192.168.2.7	0xcfa8	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:20.134757042 CEST	1.1.1.1	192.168.2.7	0x15b6	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:20.136482000 CEST	1.1.1.1	192.168.2.7	0x228e	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:21.706454992 CEST	1.1.1.1	192.168.2.7	0x2301	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:21.706474066 CEST	1.1.1.1	192.168.2.7	0x736d	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:22.271764040 CEST	1.1.1.1	192.168.2.7	0x19e4	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:22.273988008 CEST	1.1.1.1	192.168.2.7	0x1cf	No error (0)	www.afternic.com	afternic.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:30:24.947302103 CEST	1.1.1.1	192.168.2.7	0x3c64	No error (0)	stats.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:24.947302103 CEST	1.1.1.1	192.168.2.7	0x3c64	No error (0)	stats.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:24.947302103 CEST	1.1.1.1	192.168.2.7	0x3c64	No error (0)	stats.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:24.947302103 CEST	1.1.1.1	192.168.2.7	0x3c64	No error (0)	stats.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.866137981 CEST	1.1.1.1	192.168.2.7	0x996	No error (0)	www.google.com		142.250.188.228	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.866688967 CEST	1.1.1.1	192.168.2.7	0x6037	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2023 23:30:25.867583990 CEST	1.1.1.1	192.168.2.7	0xd12b	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.867583990 CEST	1.1.1.1	192.168.2.7	0xd12b	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.867583990 CEST	1.1.1.1	192.168.2.7	0xd12b	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:25.867583990 CEST	1.1.1.1	192.168.2.7	0xd12b	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:26.784094095 CEST	1.1.1.1	192.168.2.7	0xa8b6	No error (0)	www.google.com		142.250.188.228	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:30:26.785212040 CEST	1.1.1.1	192.168.2.7	0xf9a0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 12, 2023 23:31:03.115291119 CEST	1.1.1.1	192.168.2.7	0x46ec	No error (0)	i66819100-ds-aksb-a.akamaihd.net	c1.i66819100-ds-aksb-a.akamaihd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:03.115291119 CEST	1.1.1.1	192.168.2.7	0x46ec	No error (0)	c1.i66819100-ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:03.192325115 CEST	1.1.1.1	192.168.2.7	0xb564	No error (0)	i66819100-ds-aksb-a.akamaihd.net	c1.i66819100-ds-aksb-a.akamaihd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:03.192325115 CEST	1.1.1.1	192.168.2.7	0xb564	No error (0)	c1.i66819100-ds-aksb-a.akamaihd.net	ds-aksb-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292220116 CEST	1.1.1.1	192.168.2.7	0x454a	No error (0)	unpkg.com		104.16.124.175	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292220116 CEST	1.1.1.1	192.168.2.7	0x454a	No error (0)	unpkg.com		104.16.123.175	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292220116 CEST	1.1.1.1	192.168.2.7	0x454a	No error (0)	unpkg.com		104.16.126.175	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292220116 CEST	1.1.1.1	192.168.2.7	0x454a	No error (0)	unpkg.com		104.16.122.175	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292220116 CEST	1.1.1.1	192.168.2.7	0x454a	No error (0)	unpkg.com		104.16.125.175	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:06.292659998 CEST	1.1.1.1	192.168.2.7	0x2fd7	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 12, 2023 23:31:06.299411058 CEST	1.1.1.1	192.168.2.7	0xc1cc	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:06.299808025 CEST	1.1.1.1	192.168.2.7	0x3499	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:08.383126020 CEST	1.1.1.1	192.168.2.7	0x5366	No error (0)	gui.secureserver.net	gui-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:08.383282900 CEST	1.1.1.1	192.168.2.7	0x8aa1	No error (0)	gui.secureserver.net	gui-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:09.317490101 CEST	1.1.1.1	192.168.2.7	0x1349	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:09.318394899 CEST	1.1.1.1	192.168.2.7	0xb28	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:09.514928102 CEST	1.1.1.1	192.168.2.7	0xe217	No error (0)	gui.secureserver.net	gui-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:09.515845060 CEST	1.1.1.1	192.168.2.7	0x72a6	No error (0)	gui.secureserver.net	gui-ipv6.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:11.859682083 CEST	1.1.1.1	192.168.2.7	0xedae	No error (0)	znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:11.859682083 CEST	1.1.1.1	192.168.2.7	0xedae	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:11.859724045 CEST	1.1.1.1	192.168.2.7	0xba7f	No error (0)	znccpilcxlhy2kxod-godaddy.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:11.859724045 CEST	1.1.1.1	192.168.2.7	0xba7f	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:12.816891909 CEST	1.1.1.1	192.168.2.7	0x9fb9	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:12.816891909 CEST	1.1.1.1	192.168.2.7	0x9fb9	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:12.817364931 CEST	1.1.1.1	192.168.2.7	0x2620	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:12.817364931 CEST	1.1.1.1	192.168.2.7	0x2620	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:13.017584085 CEST	1.1.1.1	192.168.2.7	0x65b1	No error (0)	sso.afternic.com	sso.afternic.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:13.019644022 CEST	1.1.1.1	192.168.2.7	0xf375	No error (0)	sso.afternic.com	sso.afternic.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:16.183413982 CEST	1.1.1.1	192.168.2.7	0x49b1	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:16.183703899 CEST	1.1.1.1	192.168.2.7	0xf662	No error (0)	img6.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:17.483414888 CEST	1.1.1.1	192.168.2.7	0x608b	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:17.483414888 CEST	1.1.1.1	192.168.2.7	0x608b	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:17.483539104 CEST	1.1.1.1	192.168.2.7	0x23da	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:17.483539104 CEST	1.1.1.1	192.168.2.7	0x23da	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:19.552000999 CEST	1.1.1.1	192.168.2.7	0xfb9d	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:19.552000999 CEST	1.1.1.1	192.168.2.7	0xfb9d	No error (0)	clients.l.google.com		172.217.12.142	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:19.552674055 CEST	1.1.1.1	192.168.2.7	0x6ed2	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:19.800888062 CEST	1.1.1.1	192.168.2.7	0xffd3	No error (0)	sso.afternic.com	sso.afternic.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:19.802448988 CEST	1.1.1.1	192.168.2.7	0x82e3	No error (0)	sso.afternic.com	sso.afternic.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:20.303600073 CEST	1.1.1.1	192.168.2.7	0x8637	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:20.304884911 CEST	1.1.1.1	192.168.2.7	0x9beb	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:20.313899994 CEST	1.1.1.1	192.168.2.7	0xbff4	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:20.314213991 CEST	1.1.1.1	192.168.2.7	0x7bdb	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:22.088315964 CEST	1.1.1.1	192.168.2.7	0xb98d	No error (0)	55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com	proxy.gdw55e.elastic-cloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:22.088393927 CEST	1.1.1.1	192.168.2.7	0x73ec	No error (0)	55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com	proxy.gdw55e.elastic-cloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:22.088393927 CEST	1.1.1.1	192.168.2.7	0x73ec	No error (0)	proxy.gdw55e.elastic-cloud.com		44.234.208.169	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:22.088393927 CEST	1.1.1.1	192.168.2.7	0x73ec	No error (0)	proxy.gdw55e.elastic-cloud.com		35.155.188.70	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:22.088393927 CEST	1.1.1.1	192.168.2.7	0x73ec	No error (0)	proxy.gdw55e.elastic-cloud.com		54.189.80.227	A (IP address)	IN (0x0001)	false
Oct 12, 2023 23:31:24.729617119 CEST	1.1.1.1	192.168.2.7	0xe85	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 12, 2023 23:31:24.730988026 CEST	1.1.1.1	192.168.2.7	0x3565	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

dev-lti.bncollge.com

ww38.dev-lti.bncollge.com

www.google.com

c.parkingcrew.net

d38psrni17bvxu.cloudfront.net

fs.microsoft.com

https:

slscr.update.microsoft.com

service.force.com

tags.tiqcdn.com

stats.g.doubleclick.net

unpkg.com

55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49703	142.250.72.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49702	142.250.68.46	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.7	49722	72.247.100.147	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	142.250.176.4	443	192.168.2.7	49721	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.7	49727	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	103.224.182.240	443	192.168.2.7	49707	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	142.250.176.4	443	192.168.2.7	49727	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.7	49728	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	142.250.176.4	443	192.168.2.7	49728	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.7	49730	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	142.250.176.4	443	192.168.2.7	49730	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.7	49734	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	142.250.68.46	443	192.168.2.7	49702	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	142.250.176.4	443	192.168.2.7	49734	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.7	49737	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	142.250.176.4	443	192.168.2.7	49737	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.7	49739	20.114.59.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.7	49772	13.110.38.63	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	13.110.38.63	443	192.168.2.7	49772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.7	49777	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	65.8.164.48	443	192.168.2.7	49777	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.7	49798	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	65.8.164.48	443	192.168.2.7	49798	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	142.250.72.141	443	192.168.2.7	49703	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.7	49801	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	65.8.164.48	443	192.168.2.7	49801	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.7	49815	142.251.2.157	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	142.251.2.157	443	192.168.2.7	49815	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.7	49820	142.250.188.228	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.7	49821	142.250.101.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	142.250.101.154	443	192.168.2.7	49821	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	142.250.188.228	443	192.168.2.7	49820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.7	49822	142.250.188.228	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	142.250.188.228	443	192.168.2.7	49822	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.7	49706	103.224.182.240	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.7	49827	20.114.59.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.7	49870	104.16.124.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	104.16.124.175	443	192.168.2.7	49870	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.7	49954	44.234.208.169	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.7	49955	44.234.208.169	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.7	49710	13.248.148.254	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:54.076772928 CEST	57	OUT	GET / HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:29:56.125277996 CEST	245	OUT	GET /track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:29:56.663671970 CEST	263	OUT	GET /ls.php?t=65286552&token=b6682987fe9fb1fea8e96b18c4acb7ce6710a23b HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:30:04.931890965 CEST	1038	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=617ad5fca51cd422:T=1697146197:RT=1697146197:S=ALNI_MZICuw8GLxQCbpJeOoWcKCC1O8FSw
Oct 12, 2023 23:30:50.335783005 CEST	4857	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	13.248.148.254	80	192.168.2.7	49710	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:54.541722059 CEST	59	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:29:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_c6g4Ka9OYlAnTXMSRFrdosSRv3hwxttLJn878Qs+CB/uf/ul67eCcv7r7yKujGa03a/U65LOzrOismPe+MUmtg== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: bncollge.com X-Subdomain: ww38.dev-lti Content-Encoding: gzip Data Raw: 31 37 62 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c ed 7b da c6 b2 ff 5c ff 15 0a 79 8e c1 b7 bc 63 fc 2e e7 62 63 3b 76 02 8e 6d 1c bf e4 e9 f5 23 a4 05 64 84 44 25 61 c0 39 f9 df ef 6f 76 57 d2 0a e3 b4 e9 69 f3 e9 d0 d6 a0 dd d9 9d 99 9d 97 9d 9d 59 75 ef 4d f3 fc b0 73 f7 e9 48 1b 84 23 67 7f 65 8f be 34 cb 08 8d 82 61 75 1d cf 1c 0e d9 5c cf b4 8e a7 d3 e6 c5 dd d9 07 ef fe 74 f0 64 b6 1b 17 47 07 07 17 8d e6 d5 b4 31 bd 6a 9c 1d 34 3e fe 3e 69 1e 1f 75 6e 2f dd f2 7b bf 5c ef 5d 7f da 3c 3a eb 6c 6e ce ee dc 4f a3 cb ee b8 35 5f 7f 1a 6e 7d b8 b3 df bb c3 f6 98 59 ee e3 79 a3 7d 66 1a b7 cd 5b f3 c3 c5 59 bb ec de 7e b8 3f fb b8 d9 31 ed b3 e6 56 c3 7b 7f fb a1 52 df 3a 6c 4c 8f 1a 8d 0b 5d 7f 30 37 fa eb 1f 8c ed f3 3b a7 e1 76 6e 5b 57 97 c7 be e5 05 57 97 4f b5 c1 74 16 86 1f cf dc ad cd ad 8b e0 d7 c3 83 d2 a4 57 9a 38 1b 9b ec d0 7c da f4 37 e7 1f 26 8f 27 46 b9 66 94 ae 37 ea 1f cf 9f fd 73 3b 18 7d 62 bf b6 ae 47 61 5f d7 33 da 6c e4 b8 81 9e 19 84 e1 78 a7 54 9a 4e a7 c5 69 ad e8 f9 fd 52 65 7b 7b bb 34 a3 f5 e0 40 3b 8e e1 f6 f5 0c 73 33 5a fc 8b d6 8b 19 d6 fe 8a 86 cf de 88 85 06 96 31 1c 17 d8 ef 13 fb 49 cf 1c 7a 6e c8 dc b0 d0 99 8f 59 46 33 c5 93 9e 09 d9 2c 2c d1 bc bb 9a 39 30 fc 80 85 fa 24 ec 15 b6 32 25 75 22 d7 18 31 3d f3 64 b3 e9 d8 f3 43 65 f8 d4 b6 c2 81 6e b1 27 db 64 05 fe 90 d7 6c d7 0e 6d c3 29 04 a6 e1 30 bd 92 d7 82 81 6f bb c3 42 e8 15 7a 76 a8 bb 5e 3c 77 68 87 0e db ef ba a6 e7 38 7d Data Ascii: 17bc\{\yc.bc;vm#dD%a9ovWiYuMsH#ge4au\tdG1j4>>iun/{\]<:lnO5_n}Yy}f[Y~?1V{R:lL]07;vn[WWOtW8\|7&'Ff7s;}bGa_3lxTNiRe{{4@;s3Z1IznYF3,,90$2%u"1=dCen'dlm)0oBzv^<wh8}
Oct 12, 2023 23:29:54.541758060 CEST	61	IN	Data Raw: 56 34 bd d1 5e 49 b4 09 26 02 d3 b7 c7 a1 16 f8 a6 9e 11 cb d1 f7 bc be c3 21 4b 86 15 30 37 60 25 cb 1b 19 b6 1b 94 4c a3 57 7c 0c de 19 dd b1 5e c9 ec ef 95 c4 e0 7d be 1a 41 38 77 98 36 62 96 6d e8 19 74 30 ac dc fe 4a d1 08 c0 ef 43 10 1a 7e Data Ascii: V4^I&!K07`%LW\|^}A8w6bmt0JC~YK0}6\Tj[wfi6)7z>%>MPv/^gcfEg/\|uvJm<A*`,c}wJdo"Oo"Od`;$enK1lh84B
Oct 12, 2023 23:29:54.541775942 CEST	62	IN	Data Raw: c6 81 8e f9 f0 d4 88 b1 a9 9f 3e df 59 a8 64 3b e1 4b 22 c6 44 06 a6 60 dc e1 81 fe f2 c5 af 94 cb 79 f9 9f 14 41 62 56 2b 2b 2b bf ec 09 4b 12 27 5b 79 da 37 8b 14 47 e1 d4 81 e3 e9 94 1f 2f 05 10 0e 96 b4 ad c0 a8 46 38 df 66 b4 10 07 78 79 6e Data Ascii: >Yd;K"D`yAbV+++K'[y7G/F8fxyn4x^F%-+r>C SFkK@KcJ!$=7i_3*F6B`:919C#ht>18k\|\4w&2]$<sG$`7uXl^fva<
Oct 12, 2023 23:29:54.541788101 CEST	63	IN	Data Raw: 8f 3e 0f 30 77 bd 8d df e7 27 2d cc db b6 db d5 b6 03 21 cf 5a 27 47 f3 56 f5 8c 78 1a 9a 87 95 32 d6 3f 34 6e ea e5 fb db b3 09 d6 78 d6 72 b6 9e cd 93 01 fa 81 2f 2d 4c 71 3e d3 d3 a1 91 22 6b be 6f 7d 32 50 ca 51 e5 6d 58 21 0b 42 3d eb c1 2c Data Ascii: >0w'-!Z'GVx2?4nxr/-Lq>"ko}2PQmX!B=,v1p[a/9]~"]E{FSUC%k<tD[.K`=M{z4+_{Vn=o.#sQ]ow#:_!#4HYv
Oct 12, 2023 23:29:54.541822910 CEST	65	IN	Data Raw: 01 2b 93 c1 69 2a 83 47 ac dd af a9 1d 8c 0f a0 c6 8c 74 fe 0f 14 b0 bd 86 4b ee 00 1c dc 9b 84 c8 38 e9 94 34 5e b5 fc d7 77 1e 95 3c 31 fe 92 f5 e1 22 91 e6 0c 17 03 a3 44 08 cb 6d d3 85 32 04 3e 2e 2f b2 e9 32 ff 9a ee 96 9e 72 51 40 ff 9c 15 Data Ascii: +iGtK84^w<1"Dm2>./2rQ@+(S2;JT-8y%7)[?qN_f97_h{`r"eMazbJBEWMz)<a\?3ea@OIsGfPa( 0"n\|'D
Oct 12, 2023 23:29:54.541870117 CEST	65	IN	Data Raw: f4 3a a0 b1 dc 92 5e b3 88 80 d2 99 f3 a0 3e 6f 50 cf eb 8b ba 58 02 27 47 8c 4b 2c b4 08 72 36 11 97 63 f6 58 10 8b d5 f6 a8 da aa 0c 8a 9a 10 bb 48 ec 89 fe fe 99 fb 7c 0e bf 60 13 dd b7 98 0d 7c 78 77 54 57 f3 b8 c2 34 64 2e 10 71 8e d0 8e f7 Data Ascii: :^>oPX'GK,r6cXH\|`\|xwTW4d.qpa;&QJC+ny>RG#EGQ6+i::BWqaMb6:Q}*+)W7TaQvPdqYe1<Fg[ERwqL
Oct 12, 2023 23:29:54.541954041 CEST	65	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:29:54.555185080 CEST	65	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:29:56.528619051 CEST	261	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:29:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Oct 12, 2023 23:29:56.528647900 CEST	261	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:29:56.615000010 CEST	262	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:29:57.060973883 CEST	270	IN	HTTP/1.1 201 Created Date: Thu, 12 Oct 2023 21:29:56 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_m1xcAuVLMP06jYckVuZTNhsEWTxKkjcCLTORjE4iSlPg6z9EyBzQ/kmrSJe1XnNC3POGTUnRlvIrBhCPj7mbLA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
Oct 12, 2023 23:29:57.061049938 CEST	270	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:30:05.325347900 CEST	1044	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:30:05 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Thu, 05 Oct 2023 06:55:57 GMT ETag: "651e5dfd-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.7	49714	185.53.178.30	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:55.423707962 CEST	78	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	185.53.178.30	80	192.168.2.7	49714	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:55.742389917 CEST	118	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 12 Oct 2023 21:29:55 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Tue, 12 May 2020 14:25:52 GMT ETag: "5ebab1f0-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 27 5f 78 61 73 27 29 20 3d 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 64 65 66 69 6e 65 20 73 6f 6d 65 20 63 6f 6d 70 65 6e 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 6c 61 74 65 72 20 66 6f 72 6d 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 31 78 31 20 47 49 46 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 5f 73 75 66 20 3d 20 22 74 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 20 3d 20 22 6f 6d 61 69 6e 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 65 74 65 72 20 3d 20 22 70 68 70 3f 73 61 6c 65 6c 69 6e 6b 3d 31 22 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 6c 6f 61 64 20 74 68 65 20 31 78 31 20 47 49 46 0a 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 20 22 68 74 22 20 2b 20 70 72 6f 74 6f 5f 73 75 66 20 2b 20 22 3a 22 20 2b 20 22 2f 2f 22 20 2b 20 22 77 77 22 20 2b 20 22 77 2e 6d 79 64 22 20 2b 20 73 74 72 69 6e 67 20 2b 20 22 75 79 2e 63 6f 6d 2f 73 61 6c 65 5f 66 6f 72 6d 2e 22 20 2b 20 70 61 72 61 6d 65 74 65 72 20 2b 20 22 26 64 6f 6d 22 20 2b 20 22 61 69 6e 5f 6e 61 6d 65 3d 22 20 2b 20 77 6f 77 3b 0a 20 20 20 20 7d 0a 7d 0a Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}
Oct 12, 2023 23:29:55.948549032 CEST	180	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 12 Oct 2023 21:29:55 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Tue, 12 May 2020 14:25:52 GMT ETag: "5ebab1f0-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 27 5f 78 61 73 27 29 20 3d 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 64 65 66 69 6e 65 20 73 6f 6d 65 20 63 6f 6d 70 65 6e 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 6c 61 74 65 72 20 66 6f 72 6d 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 31 78 31 20 47 49 46 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 5f 73 75 66 20 3d 20 22 74 70 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 20 3d 20 22 6f 6d 61 69 6e 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 65 74 65 72 20 3d 20 22 70 68 70 3f 73 61 6c 65 6c 69 6e 6b 3d 31 22 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 6c 6f 61 64 20 74 68 65 20 31 78 31 20 47 49 46 0a 20 20 20 20 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 20 22 68 74 22 20 2b 20 70 72 6f 74 6f 5f 73 75 66 20 2b 20 22 3a 22 20 2b 20 22 2f 2f 22 20 2b 20 22 77 77 22 20 2b 20 22 77 2e 6d 79 64 22 20 2b 20 73 74 72 69 6e 67 20 2b 20 22 75 79 2e 63 6f 6d 2f 73 61 6c 65 5f 66 6f 72 6d 2e 22 20 2b 20 70 61 72 61 6d 65 74 65 72 20 2b 20 22 26 64 6f 6d 22 20 2b 20 22 61 69 6e 5f 6e 61 6d 65 3d 22 20 2b 20 77 6f 77 3b 0a 20 20 20 20 7d 0a 7d 0a Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.7	49718	52.85.39.16	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:56.915414095 CEST	268	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:30:42.087030888 CEST	4813	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	103.224.182.240	443	192.168.2.7	49706	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.7	49723	13.248.148.254	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:57.043493986 CEST	269	OUT	GET /track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:30:05.332077980 CEST	1045	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.dev-lti.bncollge.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=617ad5fca51cd422:T=1697146197:RT=1697146197:S=ALNI_MZICuw8GLxQCbpJeOoWcKCC1O8FSw
Oct 12, 2023 23:30:50.733828068 CEST	4873	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	52.85.39.16	80	192.168.2.7	49718	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:57.077115059 CEST	270	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Thu, 12 Oct 2023 18:00:53 GMT Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT Accept-Ranges: bytes ETag: "62b4441b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 81c9c18fb33769240d77079676b28890.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 08SfxqS9PePesgT097YcAF4Bh-8khFfVJi8oKaaf98cWVkjm-VYv5Q== Age: 12543
Oct 12, 2023 23:29:57.077213049 CEST	272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Oct 12, 2023 23:29:57.077275038 CEST	273	IN	Data Raw: 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba b8 c3 3b 11 91 22 da eb e3 0e ef 44 44 6a 68 6f 82 7b 27 7e 58 22 22 0d b4 37 c4 1d de 89 88 34 d0 de 18 77 78 27 22 92 4f bb 07 ee f0 4e 44 24 9d 76 Data Ascii: '"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;DD"h;=<ND;Q"8wx'"J{,(#
Oct 12, 2023 23:29:57.077377081 CEST	274	IN	Data Raw: dd 2e 10 f7 54 b4 27 c4 7d 7e fe e4 97 c1 1d dd 09 db 4b c6 3d 1d ed 49 71 4f c0 3b b8 a3 3b 61 bb 58 dc 53 d2 9e 18 f7 e8 bc 83 3b 87 66 a8 49 5c 5d 4a 88 7b 5a da 93 e3 1e 99 77 70 47 77 6a 10 2b 24 1d ee a9 69 cf 80 7b 54 de c1 1d dd 09 db 05 Data Ascii: .T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h
Oct 12, 2023 23:29:57.077514887 CEST	276	IN	Data Raw: c2 3d 05 ef 41 69 0f 8d 7b 64 de 2f 0d a7 dd 24 ee 1c 89 24 99 59 5c 6b 13 c3 7d 89 cb 7b 60 da c3 e3 1e 91 f7 91 b4 1b c5 1d dd 09 db 45 e0 1e 93 f7 6f 3f 10 9c e2 f0 b8 47 e2 bd 06 ed 56 71 47 77 c2 76 19 b8 c7 e2 bd fe ab d7 99 71 8f c0 7b 2d Data Ascii: =Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=
Oct 12, 2023 23:29:57.077583075 CEST	277	IN	Data Raw: 43 70 af cd 7b 7a da 07 f1 6e 0b 77 e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 Data Ascii: Cp{znw Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg
Oct 12, 2023 23:29:57.077641964 CEST	278	IN	Data Raw: ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb 0d dc 57 69 cf ca bb 13 40 7b 38 de 75 e3 ce 76 3b a9 ef 23 70 5f 4f 7b 46 de Data Ascii: w?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNqO{poD?:qW9on
Oct 12, 2023 23:29:57.077724934 CEST	280	IN	Data Raw: 9e 8a f7 e6 b4 0f e5 dd 05 a4 bd c7 7b 46 da b3 e3 8e ee 44 ad ca bc 80 17 06 db 32 2e 94 f6 21 bc bb a0 b4 27 e0 7d 08 ed f9 71 47 77 22 bd b6 0f c3 3d 36 ef fe b4 0f e4 dd 05 a6 3d 32 ef 43 69 17 80 3b ba 13 a9 b5 7d 38 ee 31 79 6f 47 fb 00 de Data Ascii: {FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0hXD>ZJ"4v)3Y5w& :"
Oct 12, 2023 23:29:57.077766895 CEST	281	IN	Data Raw: df e6 c4 5d 04 ed ad 79 77 ea 69 5f cb fb 02 b6 13 d9 e8 37 d9 70 17 43 7b 4b de 9d 01 da 57 79 cf 80 3b 23 07 88 a2 f4 49 1e dc 45 d1 de 8a 77 67 82 f6 2b bc 2f 60 3b 11 ba fb e3 2e 8e f6 5e 4f 26 c3 5d 22 ed cb bc 9f c7 76 22 74 f7 ed fc d3 42 Data Ascii: ]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBmk,+"Mf?1T<xwh\|4agGSpGwlqftP,JqGw"\GHbwg;QYnz?)sfqGwl^z!CD%>
Oct 12, 2023 23:29:57.077820063 CEST	282	IN	Data Raw: 1e 77 46 0e 10 09 ee 31 b3 b8 87 e0 dd 19 a2 3d 38 ee d8 4e 54 92 ee b2 38 7b 62 26 23 ee c2 68 0f 8d 3b b6 13 15 a5 bb 38 d0 66 32 e1 2e 8e f6 d0 b8 b3 72 88 a4 67 1a f7 76 bc 3b 43 b4 87 c5 fd 7a d6 0d 91 fc ae 37 8d 7b 9b 91 91 ce 10 ed 41 71 Data Ascii: wF1=8NT8{b&#h;8f2.rgv;Cz7{Aqg?!qvvf3OMCTG3D{@Y/D~D0nyokh'wNO}?q"j!i4DT_shDrx52A;Q_$Wg"v"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	13.248.148.254	80	192.168.2.7	49723	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:57.443248034 CEST	300	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:29:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Oct 12, 2023 23:29:57.443305016 CEST	300	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:29:57.459580898 CEST	300	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 12, 2023 23:30:05.721107006 CEST	1053	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:30:05 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Thu, 05 Oct 2023 06:55:57 GMT ETag: "651e5dfd-0" Accept-Ranges: bytes
Oct 12, 2023 23:30:05.927658081 CEST	1062	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:30:05 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Thu, 05 Oct 2023 06:55:57 GMT ETag: "651e5dfd-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.7	49725	18.239.196.136	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:58.263412952 CEST	309	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 12, 2023 23:30:43.444684982 CEST	4814	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	18.239.196.136	80	192.168.2.7	49725	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:29:58.438127995 CEST	310	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Thu, 12 Oct 2023 18:00:53 GMT Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT Accept-Ranges: bytes ETag: "62b4441b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 2166c412779de19c5bc1ca7b21f6a6d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: cxe8G4Sh_lGQjDOEi1EWLDYdI5oc4-iRCAD8v3lyEhmLEu06QBMRwA== Age: 12545
Oct 12, 2023 23:29:58.438244104 CEST	311	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Oct 12, 2023 23:29:58.438294888 CEST	312	IN	Data Raw: 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba b8 c3 3b 11 91 22 da eb e3 0e ef 44 44 6a 68 6f 82 7b 27 7e 58 22 22 0d b4 37 c4 1d de 89 88 34 d0 de 18 77 78 27 22 92 4f bb 07 ee f0 4e 44 24 9d 76 Data Ascii: '"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;DD"h;=<ND;Q"8wx'"J{,(#
Oct 12, 2023 23:29:58.438364029 CEST	314	IN	Data Raw: dd 2e 10 f7 54 b4 27 c4 7d 7e fe e4 97 c1 1d dd 09 db 4b c6 3d 1d ed 49 71 4f c0 3b b8 a3 3b 61 bb 58 dc 53 d2 9e 18 f7 e8 bc 83 3b 87 66 a8 49 5c 5d 4a 88 7b 5a da 93 e3 1e 99 77 70 47 77 6a 10 2b 24 1d ee a9 69 cf 80 7b 54 de c1 1d dd 09 db 05 Data Ascii: .T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h
Oct 12, 2023 23:29:58.438405037 CEST	315	IN	Data Raw: c2 3d 05 ef 41 69 0f 8d 7b 64 de 2f 0d a7 dd 24 ee 1c 89 24 99 59 5c 6b 13 c3 7d 89 cb 7b 60 da c3 e3 1e 91 f7 91 b4 1b c5 1d dd 09 db 45 e0 1e 93 f7 6f 3f 10 9c e2 f0 b8 47 e2 bd 06 ed 56 71 47 77 c2 76 19 b8 c7 e2 bd fe ab d7 99 71 8f c0 7b 2d Data Ascii: =Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=
Oct 12, 2023 23:29:58.438555956 CEST	317	IN	Data Raw: 43 70 af cd 7b 7a da 07 f1 6e 0b 77 e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 Data Ascii: Cp{znw Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg
Oct 12, 2023 23:29:58.438599110 CEST	318	IN	Data Raw: ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb 0d dc 57 69 cf ca bb 13 40 7b 38 de 75 e3 ce 76 3b a9 ef 23 70 5f 4f 7b 46 de Data Ascii: w?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNqO{poD?:qW9on
Oct 12, 2023 23:29:58.438637972 CEST	319	IN	Data Raw: 9e 8a f7 e6 b4 0f e5 dd 05 a4 bd c7 7b 46 da b3 e3 8e ee 44 ad ca bc 80 17 06 db 32 2e 94 f6 21 bc bb a0 b4 27 e0 7d 08 ed f9 71 47 77 22 bd b6 0f c3 3d 36 ef fe b4 0f e4 dd 05 a6 3d 32 ef 43 69 17 80 3b ba 13 a9 b5 7d 38 ee 31 79 6f 47 fb 00 de Data Ascii: {FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0hXD>ZJ"4v)3Y5w& :"
Oct 12, 2023 23:29:58.438677073 CEST	321	IN	Data Raw: df e6 c4 5d 04 ed ad 79 77 ea 69 5f cb fb 02 b6 13 d9 e8 37 d9 70 17 43 7b 4b de 9d 01 da 57 79 cf 80 3b 23 07 88 a2 f4 49 1e dc 45 d1 de 8a 77 67 82 f6 2b bc 2f 60 3b 11 ba fb e3 2e 8e f6 5e 4f 26 c3 5d 22 ed cb bc 9f c7 76 22 74 f7 ed fc d3 42 Data Ascii: ]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBmk,+"Mf?1T<xwh\|4agGSpGwlqftP,JqGw"\GHbwg;QYnz?)sfqGwl^z!CD%>
Oct 12, 2023 23:29:58.438756943 CEST	322	IN	Data Raw: 1e 77 46 0e 10 09 ee 31 b3 b8 87 e0 dd 19 a2 3d 38 ee d8 4e 54 92 ee b2 38 7b 62 26 23 ee c2 68 0f 8d 3b b6 13 15 a5 bb 38 d0 66 32 e1 2e 8e f6 d0 b8 b3 72 88 a4 67 1a f7 76 bc 3b 43 b4 87 c5 fd 7a d6 0d 91 fc ae 37 8d 7b 9b 91 91 ce 10 ed 41 71 Data Ascii: wF1=8NT8{b&#h;8f2.rgv;Cz7{Aqg?!qvvf3OMCTG3D{@Y/D~D0nyokh'wNO}?q"j!i4DT_shDrx52A;Q_$Wg"v"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.7	49711	13.248.148.254	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:30:39.170191050 CEST	4813	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.7	49724	13.248.148.254	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Oct 12, 2023 23:30:42.119030952 CEST	4813	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.7	49713	142.250.68.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	142.250.68.100	443	192.168.2.7	49713	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.7	49716	72.247.100.147	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.7	49721	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49703	142.250.72.141	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:51 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
2023-10-12 21:29:51 UTC	0	OUT	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49702	142.250.68.46	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:51 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.134 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.7	49722	72.247.100.147	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:57 UTC	156	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-10-12 21:29:57 UTC	156	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=143366 Date: Thu, 12 Oct 2023 21:29:57 GMT Content-Length: 55 Connection: close X-CID: 2
2023-10-12 21:29:57 UTC	157	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	142.250.176.4	443	192.168.2.7	49721	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:57 UTC	157	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI1cqhqQYQ3f3XhwMSBGaBkUQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UKeS_EqD7d3oIkNXPOubhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Date: Thu, 12 Oct 2023 21:29:57 GMT Server: gws Content-Length: 1641 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:29:57 UTC	159	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 25 33 46 61 64 74 65 73 74 25 33 44 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Do

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.7	49727	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:58 UTC	161	OUT	GET /sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	103.224.182.240	443	192.168.2.7	49707	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:58 UTC	163	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close
2023-10-12 21:29:58 UTC	163	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	142.250.176.4	443	192.168.2.7	49727	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:58 UTC	163	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 12 Oct 2023 21:29:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 6647 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:29:58 UTC	164	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 74 65 73 74 3d 6f 66 66 26 61 6d 70 3b 70 73 69 64 3d 31 31 36 37 32 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/afs/ads?adtest=off&psid=11672
2023-10-12 21:29:58 UTC	165	IN	Data Raw: 61 64 6c 69 6e 6b 5f 6c 65 6e 3d 34 30 26 61 6d 70 3b 74 79 70 65 3d 33 26 61 6d 70 3b 75 69 6f 70 74 3d 74 72 75 65 26 61 6d 70 3b 73 77 70 3d 61 73 2d 64 72 69 64 2d 32 38 37 37 35 36 30 34 36 30 37 35 32 38 35 35 26 61 6d 70 3b 6f 65 3d 55 54 46 2d 38 26 61 6d 70 3b 69 65 3d 55 54 46 2d 38 26 61 6d 70 3b 66 65 78 70 3d 32 31 34 30 34 26 61 6d 70 3b 66 6f 72 6d 61 74 3d 72 33 25 37 43 73 26 61 6d 70 3b 6e 6f 63 61 63 68 65 3d 35 31 34 31 36 39 37 31 34 36 31 39 35 36 32 35 26 61 6d 70 3b 6e 75 6d 3d 30 26 61 6d 70 3b 6f 75 74 70 75 74 3d 61 66 64 5f 61 64 73 26 61 6d 70 3b 64 6f 6d 61 69 6e 5f 6e 61 6d 65 3d 77 77 33 38 2e 64 65 76 2d 6c 74 69 2e 62 6e 63 6f 6c 6c 67 65 2e 63 6f 6d 26 61 6d 70 3b 76 3d 33 26 61 6d 70 3b 62 73 6c 3d 38 26 61 6d 70 3b 70 Data Ascii: adlink_len=40&type=3&uiopt=true&swp=as-drid-2877560460752855&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=5141697146195625&num=0&output=afd_ads&domain_name=ww38.dev-lti.bncollge.com&v=3&bsl=8&p
2023-10-12 21:29:58 UTC	166	IN	Data Raw: 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 64 34 7a 38 53 55 70 32 57 4a 58 50 38 68 67 68 7a 34 54 42 5f 4a 69 4e 45 4e 62 79 41 6d 6d 6a 4f 58 44 62 6d 6b 56 7a 32 47 65 36 42 36 44 55 63 5f 44 31 4c 5f 57 4c 37 49 58 76 6d 32 75 58 65 4e 47 6b 76 75 75 55 4b 57 36 74 5f 56 56 53 30 56 65 7a 56 5a 68 44 76 36 52 50 2d 31 4b 31 43 43 48 7a 6a 48 5f 4e Data Ascii: t();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_N
2023-10-12 21:29:58 UTC	167	IN	Data Raw: 32 4a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 78 4d 6c 38 7a 63 47 68 38 4d 48 77 77 66 41 25 32 35 33 44 25 32 35 33 44 26 61 6d 70 3b 74 65 72 6d 73 3d 54 65 78 74 62 6f 6f 6b 73 25 32 43 43 6f 6c 6c 65 67 65 25 32 30 54 65 78 74 62 6f 6f 6b 73 26 61 6d 70 3b 6d 61 78 5f 72 61 64 6c 69 6e 6b 5f 6c 65 6e 3d 34 30 26 61 6d 70 3b 74 79 70 65 3d 33 26 61 6d 70 3b 75 69 6f 70 74 3d 74 72 75 65 26 61 6d 70 3b 73 77 70 3d 61 73 2d 64 72 69 64 2d 32 38 37 37 35 36 30 34 36 30 37 35 32 38 35 35 26 61 6d 70 3b 6f 65 3d 55 54 46 2d 38 26 61 6d 70 3b 69 65 3d 55 54 46 2d 38 26 61 6d 70 3b 66 65 78 70 3d 32 31 34 30 34 26 61 6d 70 3b 66 6f 72 6d 61 74 3d 72 33 25 37 43 73 26 61 6d 70 3b 6e 6f 63 61 63 68 65 3d 35 31 34 31 36 39 37 31 Data Ascii: 2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%253D%253D&terms=Textbooks%2CCollege%20Textbooks&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2877560460752855&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=51416971
2023-10-12 21:29:58 UTC	168	IN	Data Raw: 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 75 73 65 20 6f 75 72 20 73 65 72 76 69 63 65 73 2e 3c 62 72 3e 3c 62 72 3e 54 68 69 73 20 74 72 61 66 66 69 63 20 6d 61 79 20 68 61 76 65 20 62 65 65 6e 20 73 65 6e 74 20 62 79 20 6d 61 6c 69 63 69 6f 75 73 20 73 6f 66 74 77 61 72 65 2c 20 61 20 62 72 6f 77 73 65 72 20 70 6c 75 67 2d 69 6e Data Ascii: s/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you continue to use our services.<br><br>This traffic may have been sent by malicious software, a browser plug-in
2023-10-12 21:29:58 UTC	169	IN	Data Raw: 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 47 49 32 4e 6a 67 79 4f 54 67 33 5a 6d 55 35 5a 6d 49 78 5a 6d 56 68 4f 47 55 35 4e 6d 49 78 4f 47 4d 30 59 57 4e 69 4e 32 4e 6c 4e 6a 63 78 4d 47 45 79 4d 32 4a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 78 4d 6c 38 7a 63 47 68 38 4d 48 77 77 66 41 25 32 35 33 44 25 32 35 33 44 26 61 6d 70 3b 74 65 72 6d 73 3d 54 65 78 74 62 6f 6f 6b 73 25 32 43 43 6f 6c 6c 65 67 65 25 32 30 54 65 78 74 62 6f 6f 6b 73 26 61 6d 70 3b 6d 61 78 5f 72 61 64 6c 69 6e 6b 5f 6c 65 6e 3d 34 30 26 61 6d 70 3b 74 79 70 65 3d 33 26 61 6d 70 3b 75 69 6f 70 74 3d 74 72 75 65 26 61 6d 70 3b 73 77 70 3d 61 73 2d 64 72 69 64 2d 32 38 37 37 35 36 30 34 36 30 37 35 32 38 Data Ascii: 8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%253D%253D&terms=Textbooks%2CCollege%20Textbooks&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-28775604607528

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.7	49728	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:59 UTC	170	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	142.250.176.4	443	192.168.2.7	49728	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:59 UTC	172	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Expires: Thu, 12 Oct 2023 21:29:59 GMT Date: Thu, 12 Oct 2023 21:29:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:29:59 UTC	173	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-10-12 21:29:59 UTC	174	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 4c 69 72 55 30 6e 61 39 72 6f 59 55 33 77 44 44 69 73 47 4a 45 56 54 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 6c 77 4a 69 77 2b 4f 54 32 69 73 71 4c 6c Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-lwJiw+OT2isqLl
2023-10-12 21:29:59 UTC	174	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.7	49730	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:02 UTC	174	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&s=d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_NHyy8KsGnyzIW4wxFm7YtvIeJDbDRuG1KSlsE2LJbX0wDlh7uqCpO0V5iQ6MBk8cWfIJ6-qQoIrSCWcduwt0x0HTG0rBKhg3sJSQDY4pzd-Bk9kB7e8L0sg77YwItQwafkmsBnzHhdgVjrhaCNW5SH-ik4mSbN4ZdAOFwW08UkUh0DwJzDu0prxI&cb=6ec4st8hf4il HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	142.250.176.4	443	192.168.2.7	49730	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:02 UTC	177	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 12 Oct 2023 21:30:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-iZKqMHI9wLb5_t67bJXmjw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:30:02 UTC	178	IN	Data Raw: 33 64 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a Data Ascii: 3d2<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-10-12 21:30:02 UTC	178	IN	Data Raw: 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f Data Ascii: /v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fo
2023-10-12 21:30:02 UTC	179	IN	Data Raw: 31 65 33 32 0d 0a 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 1e32;}/* greek /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2'); unicode-range: U+0370-03FF;}/ vietnamese */@font-face {
2023-10-12 21:30:02 UTC	180	IN	Data Raw: 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 Data Ascii: 22, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2) format('woff2'); unic
2023-10-12 21:30:02 UTC	181	IN	Data Raw: 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: -range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2023-10-12 21:30:02 UTC	182	IN	Data Raw: 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c Data Ascii: font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-styl
2023-10-12 21:30:02 UTC	184	IN	Data Raw: 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 42 63 34 2e 77 6f 66 66 Data Ascii: -1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff
2023-10-12 21:30:02 UTC	185	IN	Data Raw: 64 46 62 56 30 71 70 4f 32 75 41 6b 62 6b 38 6b 6a 48 6c 7a 44 66 63 6d 54 66 32 54 70 79 72 35 6b 52 57 57 54 50 35 78 4f 4f 6b 57 4a 72 76 68 4b 51 7a 7a 50 39 37 79 31 63 77 45 63 47 67 70 6f 58 5f 30 6b 38 75 4b 59 7a 5a 4d 6e 59 50 69 66 47 30 5a 75 4d 72 53 78 6e 44 6f 33 7a 68 76 4c 36 2d 75 73 63 56 34 63 63 67 51 59 7a 70 78 43 4c 71 78 7a 30 6c 5a 41 38 38 4e 70 48 6e 70 54 49 33 66 31 32 35 44 47 56 62 73 47 49 35 5f 38 35 5f 30 5f 43 66 74 30 76 6c 6c 73 43 4c 39 54 30 4e 6e 6f 51 5f 4e 43 62 74 6d 78 4c 56 68 75 57 44 45 32 6e 52 30 43 58 5f 6b 46 69 71 72 4a 50 6a 7a 6a 61 4f 68 61 6b 6c 7a 4f 6f 50 76 37 36 4c 79 35 30 6c 36 4d 6f 30 59 49 41 6a 32 5f 6b 5a 6f 5a 32 36 49 46 48 72 36 68 68 6b 66 71 6d 70 57 63 75 35 6a 5f 48 48 6f 56 7a 52 Data Ascii: dFbV0qpO2uAkbk8kjHlzDfcmTf2Tpyr5kRWWTP5xOOkWJrvhKQzzP97y1cwEcGgpoX_0k8uKYzZMnYPifG0ZuMrSxnDo3zhvL6-uscV4ccgQYzpxCLqxz0lZA88NpHnpTI3f125DGVbsGI5_85_0_Cft0vllsCL9T0NnoQ_NCbtmxLVhuWDE2nR0CX_kFiqrJPjzjaOhaklzOoPv76Ly50l6Mo0YIAj2_kZoZ26IFHr6hhkfqmpWcu5j_HHoVzR
2023-10-12 21:30:02 UTC	186	IN	Data Raw: 62 66 6e 61 4b 48 53 57 46 38 35 70 4e 51 6a 4b 75 4b 5f 53 4e 39 66 33 53 39 69 53 5a 58 57 42 35 47 50 44 7a 45 61 70 59 36 4b 69 30 4e 4b 32 4e 61 2d 4d 4b 64 69 6d 47 32 45 56 39 64 42 71 37 57 46 49 70 61 75 79 4c 71 5a 53 6b 78 4f 4c 4f 35 48 68 42 35 75 54 64 68 4b 56 5f 34 7a 6b 4f 7a 77 6c 59 55 4b 57 58 6c 44 44 34 31 58 68 34 39 37 38 41 5f 59 37 7a 73 41 2d 58 43 74 4d 4d 4e 56 4f 4f 34 75 5f 52 4f 31 5a 75 45 61 52 55 70 32 6c 66 6b 54 65 44 61 79 2d 30 78 34 46 39 55 58 4d 38 54 38 67 52 4b 63 78 70 7a 34 4e 30 43 55 67 36 5a 48 53 31 6e 32 31 61 65 65 45 45 77 6b 49 4e 48 4e 50 44 78 37 72 5f 44 4f 4a 34 6e 62 41 75 66 53 4f 43 4f 4d 62 53 34 76 5a 0d 0a Data Ascii: bfnaKHSWF85pNQjKuK_SN9f3S9iSZXWB5GPDzEapY6Ki0NK2Na-MKdimG2EV9dBq7WFIpauyLqZSkxOLO5HhB5uTdhKV_4zkOzwlYUKWXlDD41Xh4978A_Y7zsA-XCtMMNVOO4u_RO1ZuEaRUp2lfkTeDay-0x4F9UXM8T8gRKcxpz4N0CUg6ZHS1n21aeeEEwkINHNPDx7r_DOJ4nbAufSOCOMbS4vZ
2023-10-12 21:30:02 UTC	186	IN	Data Raw: 31 64 39 39 0d 0a 61 35 48 43 42 66 47 4e 4f 75 55 61 75 34 56 61 67 48 51 78 47 5a 77 4a 39 4a 6e 65 55 43 4a 7a 34 38 79 5f 38 52 74 34 59 66 49 53 5f 58 56 36 74 5a 38 38 79 39 70 31 39 73 4b 6d 6f 68 30 6f 45 53 64 4d 4c 30 31 31 68 56 37 33 76 56 74 59 4d 58 69 57 64 41 79 41 31 75 6d 44 65 49 4d 4f 41 47 50 58 68 37 41 67 50 46 45 52 61 4a 2d 66 6f 54 2d 70 58 55 41 32 74 70 56 51 4e 48 73 50 6a 6d 45 54 66 42 4c 6b 42 51 6a 65 6a 66 6c 65 61 49 71 4d 46 73 30 55 48 7a 53 59 50 4c 30 39 52 35 35 50 35 4d 39 68 6e 53 48 43 33 42 4e 63 59 4c 39 6d 62 62 4a 56 65 62 39 66 39 38 5a 4c 48 78 59 4e 63 61 30 52 32 44 59 72 41 68 62 68 73 73 68 73 6e 36 71 67 54 31 68 36 70 47 39 32 71 7a 59 37 61 44 5f 39 6b 45 47 57 6f 4a 72 6a 6e 76 2d 54 68 50 34 47 48 Data Ascii: 1d99a5HCBfGNOuUau4VagHQxGZwJ9JneUCJz48y_8Rt4YfIS_XV6tZ88y9p19sKmoh0oESdML011hV73vVtYMXiWdAyA1umDeIMOAGPXh7AgPFERaJ-foT-pXUA2tpVQNHsPjmETfBLkBQjejfleaIqMFs0UHzSYPL09R55P5M9hnSHC3BNcYL9mbbJVeb9f98ZLHxYNca0R2DYrAhbhsshsn6qgT1h6pG92qzY7aD_9kEGWoJrjnv-ThP4GH
2023-10-12 21:30:02 UTC	187	IN	Data Raw: 35 6b 62 32 30 6f 4b 58 77 77 4b 53 35 71 62 32 6c 75 4b 43 4a 63 62 69 49 70 4b 79 63 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 32 59 58 49 67 64 6a 55 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 69 78 45 4c 47 63 73 62 43 78 49 4b 58 74 79 5a 58 52 31 63 6d 34 6f 53 44 31 35 57 33 59 75 63 33 56 69 63 33 52 79 61 57 35 6e 4b 44 41 73 4d 79 6b 72 49 6c 38 69 58 53 6b 2f 53 43 68 32 4c 6e 4e 31 59 6e 4e 30 63 6d 6c 75 5a 79 67 7a 4b 53 78 45 4c 47 63 73 62 43 6b 36 52 45 67 6f 52 43 78 32 4b 58 30 73 62 46 38 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 69 78 45 4c 47 63 70 65 32 6c 6d 4b 43 68 45 50 58 52 35 63 47 56 76 5a 69 42 32 4c 43 4a 76 59 6d 70 6c 59 33 51 69 4b 54 30 39 52 43 6c 70 5a 69 68 32 4b 58 74 70 5a 69 68 32 49 47 6c 75 63 33 52 68 62 Data Ascii: 5kb20oKXwwKS5qb2luKCJcbiIpKycoZnVuY3Rpb24oKXt2YXIgdjU9ZnVuY3Rpb24odixELGcsbCxIKXtyZXR1cm4oSD15W3Yuc3Vic3RyaW5nKDAsMykrIl8iXSk/SCh2LnN1YnN0cmluZygzKSxELGcsbCk6REgoRCx2KX0sbF89ZnVuY3Rpb24odixELGcpe2lmKChEPXR5cGVvZiB2LCJvYmplY3QiKT09RClpZih2KXtpZih2IGluc3Rhb
2023-10-12 21:30:02 UTC	189	IN	Data Raw: 74 4d 4c 44 49 78 4c 47 78 64 4c 44 41 70 4c 47 5a 68 62 48 4e 6c 4b 53 78 32 4c 47 5a 68 62 48 4e 6c 4c 45 51 70 66 57 4e 68 64 47 4e 6f 4b 47 55 70 65 31 45 6f 4e 54 45 73 52 43 6b 2f 52 53 68 45 4c 47 55 73 4d 6a 49 70 4f 6b 73 6f 4e 54 45 73 52 43 78 6c 4b 58 31 70 5a 69 67 68 64 69 6c 37 61 57 59 6f 52 43 35 46 64 43 6c 37 5a 30 55 6f 4d 7a 49 7a 4e 54 49 78 4f 44 49 33 4d 54 63 30 4c 43 68 45 4c 6d 67 74 4c 53 78 45 4b 53 6b 37 63 6d 56 30 64 58 4a 75 66 55 55 6f 52 43 78 62 54 43 77 7a 4d 31 30 73 4d 43 6c 39 66 57 4e 68 64 47 4e 6f 4b 47 55 70 65 33 52 79 65 58 74 46 4b 45 51 73 5a 53 77 79 4d 69 6c 39 59 32 46 30 59 32 67 6f 54 79 6c 37 61 43 68 50 4c 45 51 70 66 58 31 45 4c 6d 67 74 4c 58 31 39 4c 48 46 6f 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b Data Ascii: tMLDIxLGxdLDApLGZhbHNlKSx2LGZhbHNlLEQpfWNhdGNoKGUpe1EoNTEsRCk/RShELGUsMjIpOksoNTEsRCxlKX1pZighdil7aWYoRC5FdCl7Z0UoMzIzNTIxODI3MTc0LChELmgtLSxEKSk7cmV0dXJufUUoRCxbTCwzM10sMCl9fWNhdGNoKGUpe3RyeXtFKEQsZSwyMil9Y2F0Y2goTyl7aChPLEQpfX1ELmgtLX19LHFoPWZ1bmN0aW9uK
2023-10-12 21:30:02 UTC	190	IN	Data Raw: 78 6c 62 6d 64 30 61 43 59 6d 4e 54 59 7a 4d 6a 41 39 50 53 68 32 4c 6d 4e 6f 59 58 4a 44 62 32 52 6c 51 58 51 6f 53 43 73 78 4b 53 59 32 4e 44 55 78 4d 69 6b 2f 4b 45 51 39 4e 6a 55 31 4d 7a 59 72 4b 43 68 45 4a 6a 45 77 4d 6a 4d 70 50 44 77 78 4d 43 6b 72 4b 48 59 75 59 32 68 68 63 6b 4e 76 5a 47 56 42 64 43 67 72 4b 30 67 70 4a 6a 45 77 4d 6a 4d 70 4c 47 78 62 5a 79 73 72 58 54 31 45 50 6a 34 78 4f 48 77 79 4e 44 41 73 62 46 74 6e 4b 79 74 64 50 55 51 2b 50 6a 45 79 4a 6a 59 7a 66 44 45 79 4f 43 6b 36 62 46 74 6e 4b 79 74 64 50 55 51 2b 50 6a 45 79 66 44 49 79 4e 43 78 73 57 32 63 72 4b 31 30 39 52 44 34 2b 4e 69 59 32 4d 33 77 78 4d 6a 67 70 4c 47 78 62 5a 79 73 72 58 54 31 45 4a 6a 59 7a 66 44 45 79 4f 43 6b 37 63 6d 56 30 64 58 4a 75 49 47 78 39 4c Data Ascii: xlbmd0aCYmNTYzMjA9PSh2LmNoYXJDb2RlQXQoSCsxKSY2NDUxMik/KEQ9NjU1MzYrKChEJjEwMjMpPDwxMCkrKHYuY2hhckNvZGVBdCgrK0gpJjEwMjMpLGxbZysrXT1EPj4xOHwyNDAsbFtnKytdPUQ+PjEyJjYzfDEyOCk6bFtnKytdPUQ+PjEyfDIyNCxsW2crK109RD4+NiY2M3wxMjgpLGxbZysrXT1EJjYzfDEyOCk7cmV0dXJuIGx9L
2023-10-12 21:30:02 UTC	191	IN	Data Raw: 35 6a 62 32 35 6a 59 58 51 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 62 43 6c 37 52 44 31 73 66 53 78 6e 66 53 78 76 63 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 73 5a 79 78 73 4c 45 67 70 65 32 5a 76 63 69 68 6e 50 53 68 73 50 54 41 73 53 44 31 6e 57 7a 4e 64 66 44 41 73 5a 31 73 79 58 58 77 77 4b 54 73 78 4e 44 35 73 4f 32 77 72 4b 79 6c 45 50 55 51 2b 50 6a 34 34 66 45 51 38 50 44 49 30 4c 45 67 39 53 44 34 2b 50 6a 68 38 53 44 77 38 4d 6a 51 73 53 43 73 39 5a 33 77 77 4c 45 51 72 50 58 5a 38 4d 43 78 49 58 6a 31 73 4b 7a 45 78 4f 44 49 73 64 6a 31 32 50 44 77 7a 66 48 59 2b 50 6a 34 79 4f 53 78 45 58 6a 31 6e 4b 7a 45 78 4f 44 49 73 5a 7a 31 6e 50 44 77 7a 66 47 63 2b 50 6a 34 79 4f 53 78 32 58 6a 31 45 4c 47 64 65 50 55 67 37 63 6d 56 30 64 Data Ascii: 5jb25jYXQ9ZnVuY3Rpb24obCl7RD1sfSxnfSxvcz1mdW5jdGlvbih2LEQsZyxsLEgpe2ZvcihnPShsPTAsSD1nWzNdfDAsZ1syXXwwKTsxND5sO2wrKylEPUQ+Pj44fEQ8PDI0LEg9SD4+Pjh8SDw8MjQsSCs9Z3wwLEQrPXZ8MCxIXj1sKzExODIsdj12PDwzfHY+Pj4yOSxEXj1nKzExODIsZz1nPDwzfGc+Pj4yOSx2Xj1ELGdePUg7cmV0d
2023-10-12 21:30:02 UTC	192	IN	Data Raw: 31 69 4b 48 52 79 64 57 55 73 4f 43 78 32 4b 53 78 45 4a 6a 45 79 4f 43 6b 6d 4a 69 68 45 58 6a 30 78 4d 6a 67 73 64 6a 31 69 4b 48 52 79 64 57 55 73 4d 69 78 32 4b 53 78 45 50 53 68 45 50 44 77 79 4b 53 73 6f 64 6e 77 77 4b 53 6b 73 52 48 30 73 59 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 70 65 32 5a 76 63 69 68 45 50 56 74 64 4f 33 59 74 4c 54 73 70 52 43 35 77 64 58 4e 6f 4b 44 49 31 4e 53 70 4e 59 58 52 6f 4c 6e 4a 68 62 6d 52 76 62 53 67 70 66 44 41 70 4f 33 4a 6c 64 48 56 79 62 69 42 45 66 53 78 4a 63 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 73 5a 79 78 73 4c 45 67 73 51 79 6c 37 5a 6e 56 75 59 33 52 70 62 32 34 67 5a 53 67 70 65 32 6c 6d 4b 47 77 75 54 44 30 39 62 43 6c 37 61 57 59 6f 62 43 35 76 4b 58 74 32 59 58 49 67 54 Data Ascii: 1iKHRydWUsOCx2KSxEJjEyOCkmJihEXj0xMjgsdj1iKHRydWUsMix2KSxEPShEPDwyKSsodnwwKSksRH0sYz1mdW5jdGlvbih2LEQpe2ZvcihEPVtdO3YtLTspRC5wdXNoKDI1NSpNYXRoLnJhbmRvbSgpfDApO3JldHVybiBEfSxJcz1mdW5jdGlvbih2LEQsZyxsLEgsQyl7ZnVuY3Rpb24gZSgpe2lmKGwuTD09bCl7aWYobC5vKXt2YXIgT
2023-10-12 21:30:02 UTC	194	IN	Data Raw: 39 79 4b 47 77 39 4b 45 52 38 4d 43 6b 74 4d 53 78 6e 50 56 74 64 4f 7a 41 38 50 57 77 37 62 43 30 74 4b 57 64 62 4b 45 52 38 4d 43 6b 74 4d 53 30 6f 62 48 77 77 4b 56 30 39 64 6a 34 2b 4f 43 70 73 4a 6a 49 31 4e 0d 0a Data Ascii: 9yKGw9KER8MCktMSxnPVtdOzA8PWw7bC0tKWdbKER8MCktMS0obHwwKV09dj4+OCpsJjI1N
2023-10-12 21:30:02 UTC	194	IN	Data Raw: 34 31 61 38 0d 0a 54 74 79 5a 58 52 31 63 6d 34 67 5a 33 30 73 57 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 73 5a 79 78 73 4c 45 67 73 51 79 6c 37 61 57 59 6f 64 69 35 70 4c 6d 78 6c 62 6d 64 30 61 43 6c 37 4b 48 59 75 55 79 59 6d 4d 43 67 70 4c 48 59 70 4c 6c 4d 39 64 48 4a 31 5a 53 78 32 4c 6d 6c 42 50 57 63 37 64 48 4a 35 65 32 77 39 64 69 35 48 4b 43 6b 73 64 69 35 71 50 57 77 73 64 69 35 5a 50 54 41 73 64 69 35 31 50 57 77 73 51 7a 31 79 52 53 68 6e 4c 48 59 70 4c 45 67 39 64 69 35 48 4b 43 6b 74 64 69 35 31 4c 48 59 75 53 43 73 39 53 43 78 49 50 43 68 45 50 7a 41 36 4d 54 41 70 66 48 77 77 50 6a 31 32 4c 6b 6b 74 4c 58 78 38 4b 45 67 39 54 57 46 30 61 43 35 6d 62 47 39 76 63 69 68 49 4b 53 78 32 4c 6d 77 75 63 48 56 7a 61 43 67 79 4e 54 Data Ascii: 41a8TtyZXR1cm4gZ30sWj1mdW5jdGlvbih2LEQsZyxsLEgsQyl7aWYodi5pLmxlbmd0aCl7KHYuUyYmMCgpLHYpLlM9dHJ1ZSx2LmlBPWc7dHJ5e2w9di5HKCksdi5qPWwsdi5ZPTAsdi51PWwsQz1yRShnLHYpLEg9di5HKCktdi51LHYuSCs9SCxIPChEPzA6MTApfHwwPj12LkktLXx8KEg9TWF0aC5mbG9vcihIKSx2LmwucHVzaCgyNT
2023-10-12 21:30:02 UTC	195	IN	Data Raw: 73 5a 57 35 6e 64 47 67 2f 52 53 68 45 4c 46 74 4d 4c 44 4d 32 58 53 77 77 4b 54 6f 6f 52 43 35 51 4c 6e 42 31 63 32 67 6f 52 43 35 76 4c 6e 4e 73 61 57 4e 6c 4b 43 6b 70 4c 45 51 75 62 31 73 31 4f 56 30 39 64 6d 39 70 5a 43 41 77 4c 45 73 6f 4e 54 6b 73 52 43 78 32 4b 53 6c 39 4c 47 56 44 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 48 59 73 52 43 6c 37 63 6d 56 30 64 58 4a 75 4b 48 59 39 64 69 35 6a 63 6d 56 68 64 47 55 6f 4b 53 35 7a 61 47 6c 6d 64 43 67 70 4c 45 51 75 56 53 35 6a 63 6d 56 68 64 47 55 6f 4b 53 35 73 5a 57 35 6e 64 47 67 70 66 48 78 45 4c 6b 38 75 59 33 4a 6c 59 58 52 6c 4b 43 6b 75 62 47 56 75 5a 33 52 6f 66 48 77 6f 52 43 35 56 50 58 5a 76 61 57 51 67 4d 43 78 45 4c 6b 38 39 64 6d 39 70 5a 43 41 77 4b 53 78 32 66 53 78 36 50 58 52 6f 61 58 Data Ascii: sZW5ndGg/RShELFtMLDM2XSwwKTooRC5QLnB1c2goRC5vLnNsaWNlKCkpLEQub1s1OV09dm9pZCAwLEsoNTksRCx2KSl9LGVDPWZ1bmN0aW9uKHYsRCl7cmV0dXJuKHY9di5jcmVhdGUoKS5zaGlmdCgpLEQuVS5jcmVhdGUoKS5sZW5ndGgpfHxELk8uY3JlYXRlKCkubGVuZ3RofHwoRC5VPXZvaWQgMCxELk89dm9pZCAwKSx2fSx6PXRoaX
2023-10-12 21:30:02 UTC	196	IN	Data Raw: 6f 51 79 6c 37 51 79 68 73 4c 6b 59 70 66 53 6c 39 66 53 78 46 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 48 59 73 52 43 78 6e 4c 47 77 73 53 43 78 44 4b 58 74 70 5a 69 67 68 64 69 35 53 4b 58 74 70 5a 69 67 7a 50 43 68 45 50 56 45 6f 4d 6a 6b 78 4c 43 67 6f 4d 44 30 39 4b 45 4d 39 55 53 67 6f 4b 45 67 39 64 6d 39 70 5a 43 41 77 4c 45 51 6d 4a 6b 52 62 4d 46 30 39 50 54 31 4d 4b 53 59 6d 4b 47 63 39 52 46 73 78 58 53 78 49 50 55 52 62 4d 6c 30 73 52 44 31 32 62 32 6c 6b 49 44 41 70 4c 44 49 77 4e 53 6b 73 64 69 6b 73 51 79 35 73 5a 57 35 6e 64 47 67 70 4a 69 59 6f 62 44 31 52 4b 44 51 34 4d 53 78 32 4b 54 34 2b 4d 79 78 44 4c 6e 42 31 63 32 67 6f 5a 79 78 73 50 6a 34 34 4a 6a 49 31 4e 53 78 73 4a 6a 49 31 4e 53 6b 73 64 6d 39 70 5a 43 41 77 49 54 31 49 4a 69 Data Ascii: oQyl7QyhsLkYpfSl9fSxFPWZ1bmN0aW9uKHYsRCxnLGwsSCxDKXtpZighdi5SKXtpZigzPChEPVEoMjkxLCgoMD09KEM9USgoKEg9dm9pZCAwLEQmJkRbMF09PT1MKSYmKGc9RFsxXSxIPURbMl0sRD12b2lkIDApLDIwNSksdiksQy5sZW5ndGgpJiYobD1RKDQ4MSx2KT4+MyxDLnB1c2goZyxsPj44JjI1NSxsJjI1NSksdm9pZCAwIT1IJi
2023-10-12 21:30:02 UTC	197	IN	Data Raw: 6f 4c 44 49 70 4b 53 78 49 4b 53 78 45 4c 47 63 70 66 53 77 6b 59 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 73 5a 79 78 73 4b 58 74 79 5a 58 52 31 63 6d 34 67 55 53 67 79 4e 44 41 73 4b 45 73 6f 4e 54 6b 73 52 43 77 6f 5a 30 55 6f 4b 43 68 73 50 56 45 6f 4e 54 6b 73 52 43 6b 73 52 43 35 44 4b 53 59 6d 62 44 78 45 4c 6d 63 2f 4b 45 73 6f 4e 54 6b 73 52 43 78 45 4c 6d 63 70 4c 47 59 79 4b 47 63 73 52 43 6b 70 4f 6b 73 6f 4e 54 6b 73 52 43 78 6e 4b 53 78 32 4b 53 78 45 4b 53 78 73 4b 53 6b 73 52 43 6b 70 66 53 78 74 65 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 73 5a 79 78 73 4c 45 67 73 51 79 6c 37 5a 6d 39 79 4b 45 4d 39 4b 43 68 73 4c 6e 4a 47 50 53 68 73 4c 6b 4d 30 50 53 67 6f 62 43 35 58 4d 7a 31 54 51 79 78 73 4b 53 35 43 4d 7a Data Ascii: oLDIpKSxIKSxELGcpfSwkYz1mdW5jdGlvbih2LEQsZyxsKXtyZXR1cm4gUSgyNDAsKEsoNTksRCwoZ0UoKChsPVEoNTksRCksRC5DKSYmbDxELmc/KEsoNTksRCxELmcpLGYyKGcsRCkpOksoNTksRCxnKSx2KSxEKSxsKSksRCkpfSxtej1mdW5jdGlvbih2LEQsZyxsLEgsQyl7Zm9yKEM9KChsLnJGPShsLkM0PSgobC5XMz1TQyxsKS5CMz
2023-10-12 21:30:02 UTC	198	IN	Data Raw: 78 50 56 41 6f 5a 53 6b 73 55 43 6b 6f 5a 53 6b 73 55 53 68 78 4c 47 55 70 4b 53 78 52 4b 45 38 73 5a 53 6b 70 4c 48 45 70 4a 69 5a 4c 4b 44 55 35 4c 47 55 73 54 79 6c 39 4c 43 68 4c 4b 44 51 78 4e 43 78 73 4c 43 68 4c 4b 44 4d 7a 4d 43 77 6f 64 53 68 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 4c 45 38 73 63 53 78 55 4c 47 73 73 51 53 78 33 4c 46 55 73 5a 69 78 48 4c 48 51 73 62 53 6c 37 5a 6e 56 75 59 33 52 70 62 32 34 67 65 43 68 79 4c 45 49 70 65 32 5a 76 63 69 67 37 54 7a 78 79 4f 79 6c 33 66 44 31 5a 4b 47 55 70 50 44 78 50 4c 45 38 72 50 54 67 37 63 6d 56 30 64 58 4a 75 49 48 63 2b 50 6a 30 6f 51 6a 31 33 4a 69 68 50 4c 54 31 79 4c 44 45 38 50 48 49 70 4c 54 45 73 63 69 6b 73 51 6e 31 6d 62 33 49 6f 62 54 30 6f 51 54 30 6f 56 44 31 51 4b 47 55 70 4c 48 Data Ascii: xPVAoZSksUCkoZSksUShxLGUpKSxRKE8sZSkpLHEpJiZLKDU5LGUsTyl9LChLKDQxNCxsLChLKDMzMCwodShmdW5jdGlvbihlLE8scSxULGssQSx3LFUsZixHLHQsbSl7ZnVuY3Rpb24geChyLEIpe2Zvcig7TzxyOyl3fD1ZKGUpPDxPLE8rPTg7cmV0dXJuIHc+Pj0oQj13JihPLT1yLDE8PHIpLTEsciksQn1mb3IobT0oQT0oVD1QKGUpLH
2023-10-12 21:30:02 UTC	200	IN	Data Raw: 73 56 43 6b 73 5a 53 6b 73 63 53 6b 73 5a 53 6b 73 61 79 6b 73 5a 53 6b 73 62 46 38 6f 56 43 6b 70 4b 58 74 6d 62 33 49 6f 51 53 42 70 62 69 42 72 50 56 74 64 4c 46 51 70 61 79 35 77 64 58 4e 6f 4b 45 45 70 4f 31 51 39 61 33 31 6d 62 33 49 6f 61 7a 30 6f 51 54 30 6f 54 7a 30 77 50 45 38 2f 54 7a 6f 78 4c 44 41 70 4c 46 51 75 62 47 56 75 5a 33 52 6f 4b 54 74 42 50 47 73 37 51 53 73 39 54 79 6c 6c 4b 46 51 75 63 32 78 70 59 32 55 6f 51 53 77 6f 51 58 77 77 4b 53 73 6f 54 33 77 77 4b 53 6b 73 63 53 6c 39 66 53 77 6f 4b 48 55 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 53 78 50 4c 48 45 70 65 30 73 6f 4b 45 38 39 62 46 38 6f 4b 45 38 39 4b 48 45 39 55 43 67 6f 54 7a 31 51 4b 47 55 70 4c 47 55 70 4b 53 78 52 4b 53 68 50 4c 47 55 70 4c 45 38 70 4b 53 78 78 4b 53 Data Ascii: sVCksZSkscSksZSksayksZSksbF8oVCkpKXtmb3IoQSBpbiBrPVtdLFQpay5wdXNoKEEpO1Q9a31mb3Ioaz0oQT0oTz0wPE8/TzoxLDApLFQubGVuZ3RoKTtBPGs7QSs9TyllKFQuc2xpY2UoQSwoQXwwKSsoT3wwKSkscSl9fSwoKHUoZnVuY3Rpb24oZSxPLHEpe0soKE89bF8oKE89KHE9UCgoTz1QKGUpLGUpKSxRKShPLGUpLE8pKSxxKS
2023-10-12 21:30:02 UTC	201	IN	Data Raw: 6c 4b 53 78 78 50 56 6b 6f 5a 53 6b 73 55 43 68 6c 4b 53 6b 73 56 43 6b 73 5a 53 78 52 4b 45 38 73 5a 53 6b 2b 50 6a 35 78 4b 58 30 73 4b 45 73 6f 4e 44 67 78 4c 47 77 73 4b 45 73 6f 4b 47 77 75 52 30 73 39 4b 47 77 75 51 6a 30 6f 62 43 35 54 50 53 67 6f 4b 47 77 75 54 7a 30 6f 62 43 35 4a 50 54 49 31 4c 48 5a 76 61 57 51 67 4d 43 6b 73 62 43 35 42 50 56 74 64 4c 47 77 70 4c 6d 6f 39 4b 47 77 75 61 55 45 39 4b 47 77 75 55 44 31 62 58 53 78 6d 59 57 78 7a 5a 53 6b 73 4d 43 6b 73 62 43 35 73 50 56 74 64 4c 47 77 70 4c 6d 38 39 4b 47 77 75 53 44 30 77 4c 47 77 75 51 7a 31 62 58 53 78 62 58 53 6b 73 62 43 35 6f 50 54 41 73 62 43 35 4c 50 58 5a 76 61 57 51 67 4d 43 78 73 4c 6b 59 39 64 6d 39 70 5a 43 41 77 4c 43 68 73 4c 6b 34 39 4b 47 77 75 56 6a 30 77 4c 47 Data Ascii: lKSxxPVkoZSksUChlKSksVCksZSxRKE8sZSk+Pj5xKX0sKEsoNDgxLGwsKEsoKGwuR0s9KGwuQj0obC5TPSgoKGwuTz0obC5JPTI1LHZvaWQgMCksbC5BPVtdLGwpLmo9KGwuaUE9KGwuUD1bXSxmYWxzZSksMCksbC5sPVtdLGwpLm89KGwuSD0wLGwuQz1bXSxbXSksbC5oPTAsbC5LPXZvaWQgMCxsLkY9dm9pZCAwLChsLk49KGwuVj0wLG
2023-10-12 21:30:02 UTC	202	IN	Data Raw: 6d 4b 47 55 75 54 6a 31 69 4b 47 5a 68 62 48 4e 6c 4c 44 4d 79 4c 47 55 70 4c 47 55 75 51 6a 31 32 62 32 6c 6b 49 44 41 70 4b 53 6c 39 4b 53 77 78 4e 54 59 73 62 43 6b 73 4d 43 6b 73 62 43 6b 70 4c 47 77 70 4c 6b 39 30 50 54 41 73 4d 7a 51 32 4b 53 78 73 4b 53 78 73 4b 53 6b 73 57 7a 41 73 4d 43 77 77 58 53 6b 70 4c 44 45 78 4d 43 6b 70 4c 47 77 70 4c 44 41 70 4c 47 77 70 4b 53 78 73 4b 53 78 62 58 53 6b 73 57 7a 45 32 4d 43 77 77 4c 44 42 64 4b 53 6b 73 4d 6a 45 79 4b 53 78 73 4b 53 77 79 4d 44 51 34 4b 53 6b 73 62 43 6b 70 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 55 73 54 79 78 78 4c 46 51 70 65 79 68 78 50 56 45 6f 4b 45 38 39 4b 46 51 39 4b 45 38 39 55 43 68 6c 4b 53 78 78 50 56 41 6f 5a 53 6b 73 55 43 68 6c 4b 53 6b 73 55 53 68 50 4c 47 55 70 4b 53 Data Ascii: mKGUuTj1iKGZhbHNlLDMyLGUpLGUuQj12b2lkIDApKSl9KSwxNTYsbCksMCksbCkpLGwpLk90PTAsMzQ2KSxsKSxsKSksWzAsMCwwXSkpLDExMCkpLGwpLDApLGwpKSxsKSxbXSksWzE2MCwwLDBdKSksMjEyKSxsKSwyMDQ4KSksbCkpLGZ1bmN0aW9uKGUsTyxxLFQpeyhxPVEoKE89KFQ9KE89UChlKSxxPVAoZSksUChlKSksUShPLGUpKS
2023-10-12 21:30:02 UTC	203	IN	Data Raw: 6e 49 69 78 62 58 53 6b 73 54 54 30 6f 56 79 35 77 63 6d 39 30 62 33 52 35 63 47 55 75 59 7a 4d 39 64 6d 39 70 5a 43 41 77 4c 46 74 64 4b 53 78 50 52 6a 31 62 58 53 78 4a 50 56 74 64 4c 47 68 4b 50 56 74 64 4c 46 4d 39 4b 43 67 6f 51 6a 55 73 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 39 4b 53 68 6a 4b 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 30 70 4b 46 52 49 4b 53 78 51 4e 53 78 4d 4c 6d 4e 76 62 6e 4e 30 63 6e 56 6a 64 47 39 79 4b 53 78 72 59 7a 30 6f 63 44 31 58 4c 6e 42 79 62 33 52 76 64 48 6c 77 5a 53 78 77 4c 6e 41 30 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 48 59 73 52 43 78 6e 4c 47 77 73 53 43 78 44 4b 58 74 6d 62 33 49 6f 5a 7a 30 6f 51 7a 31 62 58 53 78 49 50 54 41 73 4d 43 6b 37 5a 7a 78 32 4c 6d 78 6c 62 6d 64 30 61 44 74 6e 4b 79 Data Ascii: nIixbXSksTT0oVy5wcm90b3R5cGUuYzM9dm9pZCAwLFtdKSxPRj1bXSxJPVtdLGhKPVtdLFM9KCgoQjUsZnVuY3Rpb24oKXt9KShjKSxmdW5jdGlvbigpe30pKFRIKSxQNSxMLmNvbnN0cnVjdG9yKSxrYz0ocD1XLnByb3RvdHlwZSxwLnA0PWZ1bmN0aW9uKHYsRCxnLGwsSCxDKXtmb3IoZz0oQz1bXSxIPTAsMCk7Zzx2Lmxlbmd0aDtnKy
2023-10-12 21:30:02 UTC	205	IN	Data Raw: 70 62 32 34 6f 4b 58 74 79 5a 58 52 31 63 6d 34 72 62 6d 56 33 49 45 52 68 64 47 56 39 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 48 59 73 52 43 6c 37 63 6d 56 30 64 58 4a 75 49 47 74 6a 50 53 68 45 50 53 68 32 50 58 74 39 4c 48 74 39 4b 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 4a 6c 64 48 56 79 62 69 42 32 50 54 31 45 50 7a 63 31 4f 6a 45 34 66 53 6b 73 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 79 78 73 4c 45 67 73 51 79 78 6c 4c 45 38 73 63 53 78 55 4c 47 73 73 51 53 78 33 4c 46 55 73 5a 69 78 48 4c 48 51 73 62 53 78 34 4c 48 49 73 51 69 78 68 4b 58 74 72 50 58 59 73 64 6a 31 45 4f 33 52 79 65 58 74 70 5a 69 68 6c 50 57 64 62 4d 46 30 73 5a 54 30 39 61 45 6f 70 65 30 4d 39 5a 31 73 78 58 54 74 30 63 6e 6c 37 5a 6d 39 79 4b 46 55 39 4b 48 45 39 59 58 Data Ascii: pb24oKXtyZXR1cm4rbmV3IERhdGV9LGZ1bmN0aW9uKHYsRCl7cmV0dXJuIGtjPShEPSh2PXt9LHt9KSxmdW5jdGlvbigpe3JldHVybiB2PT1EPzc1OjE4fSksZnVuY3Rpb24oZyxsLEgsQyxlLE8scSxULGssQSx3LFUsZixHLHQsbSx4LHIsQixhKXtrPXYsdj1EO3RyeXtpZihlPWdbMF0sZT09aEope0M9Z1sxXTt0cnl7Zm9yKFU9KHE9YX
2023-10-12 21:30:02 UTC	206	IN	Data Raw: 7a 4c 6b 77 39 51 58 31 70 5a 69 68 56 50 57 4d 6f 4d 69 6b 75 59 32 39 75 59 32 46 30 4b 46 45 6f 4e 44 45 30 4c 48 52 6f 61 58 4d 70 4b 53 78 56 57 7a 46 64 50 56 56 62 4d 46 31 65 4e 69 78 56 57 7a 4e 64 50 56 56 62 4d 56 31 65 53 46 73 77 58 53 78 56 57 7a 52 64 50 56 56 62 4d 56 31 65 53 46 73 78 58 53 78 73 50 58 52 6f 61 58 4d 75 56 58 51 6f 56 53 6b 70 62 44 30 69 49 53 49 72 62 44 74 6c 62 48 4e 6c 49 47 5a 76 63 69 68 73 50 53 49 69 4c 48 45 39 4d 44 74 78 50 46 55 75 62 47 56 75 5a 33 52 6f 4f 33 45 72 4b 79 6c 34 50 56 56 62 63 56 31 62 64 47 68 70 63 79 35 59 58 53 67 78 4e 69 6b 73 4d 54 30 39 65 43 35 73 5a 57 35 6e 64 47 67 6d 4a 69 68 34 50 53 49 77 49 69 74 34 4b 53 78 73 4b 7a 31 34 4f 33 4a 6c 64 48 56 79 62 69 42 52 4b 44 4d 7a 4d 43 Data Ascii: zLkw9QX1pZihVPWMoMikuY29uY2F0KFEoNDE0LHRoaXMpKSxVWzFdPVVbMF1eNixVWzNdPVVbMV1eSFswXSxVWzRdPVVbMV1eSFsxXSxsPXRoaXMuVXQoVSkpbD0iISIrbDtlbHNlIGZvcihsPSIiLHE9MDtxPFUubGVuZ3RoO3ErKyl4PVVbcV1bdGhpcy5YXSgxNiksMT09eC5sZW5ndGgmJih4PSIwIit4KSxsKz14O3JldHVybiBRKDMzMC
2023-10-12 21:30:02 UTC	207	IN	Data Raw: 68 59 32 55 6f 4c 31 78 63 4b 79 39 6e 4c 43 49 74 49 69 6b 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 58 46 77 76 4c 32 63 73 49 6c 38 69 4b 53 35 79 5a 58 42 73 59 57 4e 6c 4b 43 38 39 4c 32 63 73 49 69 49 70 66 57 56 73 63 32 55 67 64 6a 31 32 62 32 6c 6b 49 44 41 37 63 6d 56 30 64 58 4a 75 49 48 5a 39 4c 46 63 75 63 48 4a 76 64 47 39 30 65 58 42 6c 57 31 59 33 58 53 6b 70 4c 46 4a 7a 50 53 68 54 51 7a 30 6f 57 57 4e 62 56 79 35 77 63 6d 39 30 62 33 52 35 63 47 55 75 57 46 30 39 59 58 4d 73 52 55 59 70 4b 48 74 6e 5a 58 51 36 59 58 4e 39 4c 46 63 75 63 48 4a 76 64 47 39 30 65 58 42 6c 4c 6c 6f 70 4c 46 63 75 63 48 4a 76 64 47 39 30 65 58 42 6c 4c 6b 70 4a 50 58 5a 76 61 57 51 67 4d 43 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 32 4c 45 51 70 65 33 4a 6c 64 48 Data Ascii: hY2UoL1xcKy9nLCItIikucmVwbGFjZSgvXFwvL2csIl8iKS5yZXBsYWNlKC89L2csIiIpfWVsc2Ugdj12b2lkIDA7cmV0dXJuIHZ9LFcucHJvdG90eXBlW1Y3XSkpLFJzPShTQz0oWWNbVy5wcm90b3R5cGUuWF09YXMsRUYpKHtnZXQ6YXN9LFcucHJvdG90eXBlLlopLFcucHJvdG90eXBlLkpJPXZvaWQgMCxmdW5jdGlvbih2LEQpe3JldH
2023-10-12 21:30:02 UTC	208	IN	Data Raw: 64 79 4f 47 78 71 56 54 4e 4c 63 32 31 49 55 48 59 78 64 57 31 73 61 46 46 46 51 56 46 34 4d 48 6b 72 59 56 42 7a 4e 7a 51 78 63 6c 52 75 65 6d 55 77 53 43 74 4f 55 32 6c 5a 59 58 6b 72 62 6d 70 75 55 32 6c 69 64 45 78 51 56 57 4e 33 61 6c 46 43 57 47 6c 6c 5a 32 46 79 63 6b 4a 5a 5a 48 41 35 64 6c 4a 46 52 6b 70 30 4e 79 73 72 55 45 78 31 57 6b 64 35 65 6c 49 31 52 6e 42 51 51 31 46 47 52 33 51 77 62 44 68 75 55 6e 5a 56 4e 6d 31 36 53 57 68 61 4b 33 4a 34 61 6d 70 70 51 30 31 31 53 55 4a 4e 5a 57 74 68 53 54 64 4f 53 6a 55 34 4f 55 78 36 4e 6e 6b 35 59 32 70 48 52 45 56 4f 4d 54 42 76 62 46 5a 36 57 56 56 57 53 30 4e 71 4e 6c 52 52 5a 56 49 79 65 46 42 73 56 55 56 70 4c 7a 42 78 51 57 4a 70 56 57 56 34 54 32 39 4c 63 30 4e 71 61 6c 64 32 4d 6b 4e 42 4d Data Ascii: dyOGxqVTNLc21IUHYxdW1saFFFQVF4MHkrYVBzNzQxclRuemUwSCtOU2lZYXkrbmpuU2lidExQVWN3alFCWGllZ2FyckJZZHA5dlJFRkp0NysrUEx1Wkd5elI1RnBQQ1FGR3QwbDhuUnZVNm16SWhaK3J4amppQ011SUJNZWthSTdOSjU4OUx6Nnk5Y2pHREVOMTBvbFZ6WVVWS0NqNlRRZVIyeFBsVUVpLzBxQWJpVWV4T29Lc0Nqald2MkNBM
2023-10-12 21:30:02 UTC	209	IN	Data Raw: 6b 31 4d 30 46 4c 51 54 68 42 5a 55 52 51 53 30 46 71 4e 6a 6c 79 65 57 31 77 5a 30 35 46 53 56 68 7a 55 46 4a 44 61 79 74 56 4f 48 67 79 55 56 6b 78 4e 48 4e 78 53 57 56 45 64 31 4a 4b 55 57 63 32 59 54 52 54 4e 54 56 74 5a 56 46 30 4d 32 4e 4a 4f 44 52 73 64 45 46 4e 53 44 5a 31 4d 55 5a 56 54 31 52 61 56 32 46 35 4f 56 41 76 54 57 70 45 65 54 68 50 55 47 56 33 59 56 64 43 62 30 64 56 4d 48 68 59 63 45 68 70 63 48 68 76 4e 31 45 30 64 6c 59 30 59 54 59 33 5a 6c 5a 74 56 79 39 6c 65 58 64 43 4e 6b 52 61 52 6d 35 31 4c 31 42 75 4d 6a 68 4c 61 6d 56 30 64 54 68 6a 54 6a 64 34 56 6a 4e 77 63 7a 64 69 4e 7a 4a 34 5a 6e 6c 30 61 48 4d 32 62 6d 68 56 52 48 6f 78 62 45 59 30 4d 44 45 32 51 6c 56 43 54 47 68 34 61 79 39 34 52 31 4a 47 52 56 5a 45 56 32 6b 33 65 Data Ascii: k1M0FLQThBZURQS0FqNjlyeW1wZ05FSVhzUFJDaytVOHgyUVkxNHNxSWVEd1JKUWc2YTRTNTVtZVF0M2NJODRsdEFNSDZ1MUZVT1RaV2F5OVAvTWpEeThPUGV3YVdCb0dVMHhYcEhpcHhvN1E0dlY0YTY3ZlZtVy9leXdCNkRaRm51L1BuMjhLamV0dThjTjd4VjNwczdiNzJ4Znl0aHM2bmhVRHoxbEY0MDE2QlVCTGh4ay94R1JGRVZEV2k3e
2023-10-12 21:30:02 UTC	210	IN	Data Raw: 35 38 39 39 0d 0a 62 56 4e 70 64 47 46 5a 54 6b 31 61 56 6e 46 72 4e 46 56 69 54 44 46 50 63 6b 46 4f 56 6a 42 34 51 53 39 35 5a 6b 4a 6a 65 57 56 6e 4d 44 64 52 55 6c 42 6c 59 30 74 47 52 6b 52 6e 55 58 5a 69 54 6b 46 56 52 57 39 30 64 6c 64 58 53 54 5a 48 55 48 55 35 52 79 74 47 64 57 74 74 63 6a 56 4f 64 56 42 43 4f 53 74 52 52 47 68 6a 55 6c 5a 32 57 6d 56 51 4e 30 74 57 55 48 64 6d 59 58 6f 79 61 54 6c 75 54 43 39 50 53 7a 67 34 53 48 6c 34 51 7a 56 78 62 6c 64 79 51 69 74 59 53 54 6b 30 51 30 68 72 4d 46 56 50 4c 7a 4e 4d 54 44 52 31 4d 6e 56 6b 56 32 39 71 65 55 39 50 51 6b 74 6e 59 57 78 52 55 6c 68 52 51 6a 56 70 64 6d 70 49 55 6d 63 78 4d 6d 59 31 4b 30 52 33 56 46 46 6a 56 30 59 7a 61 48 4a 6b 57 55 6b 34 62 43 74 48 56 6e 70 33 63 46 46 42 51 Data Ascii: 5899bVNpdGFZTk1aVnFrNFViTDFPckFOVjB4QS95ZkJjeWVnMDdRUlBlY0tGRkRnUXZiTkFVRW90dldXSTZHUHU5RytGdWttcjVOdVBCOStRRGhjUlZ2WmVQN0tWUHdmYXoyaTluTC9PSzg4SHl4QzVxbldyQitYSTk0Q0hrMFVPLzNMTDR1MnVkV29qeU9PQktnYWxRUlhRQjVpdmpIUmcxMmY1K0R3VFFjV0YzaHJkWUk4bCtHVnp3cFFBQ
2023-10-12 21:30:02 UTC	211	IN	Data Raw: 39 6c 56 33 67 78 4c 30 31 54 63 57 70 34 52 55 74 52 5a 32 46 50 5a 6e 42 6d 63 6d 46 34 61 46 70 4f 52 31 4e 68 64 32 68 78 54 6b 64 77 57 46 6c 54 52 6b 4d 33 59 6d 6b 7a 4e 57 56 52 65 47 51 35 59 6d 34 31 4e 31 42 76 5a 6d 64 70 63 32 6f 34 53 6e 70 46 61 56 6f 32 63 56 52 74 62 47 4d 77 63 32 52 36 51 6a 4a 52 62 7a 68 4b 5a 45 49 34 59 54 56 4d 54 57 52 54 53 6e 52 54 54 31 5a 49 4d 54 4a 6d 61 55 6c 76 54 7a 4a 36 4e 6c 55 7a 4d 44 4e 44 54 6c 64 73 4c 30 5a 47 53 6b 39 74 4e 30 78 73 4e 46 70 68 61 30 59 78 52 6b 55 30 54 47 77 72 64 55 70 70 62 54 67 7a 56 6d 63 33 4b 7a 52 59 4d 46 68 52 64 33 5a 70 51 30 64 7a 59 55 31 43 57 6b 5a 6f 52 45 5a 34 63 6b 73 79 5a 56 6c 6a 5a 48 4a 69 55 47 31 71 4b 30 70 4e 56 47 70 59 53 6d 67 72 56 45 70 44 51 Data Ascii: 9lV3gxL01TcWp4RUtRZ2FPZnBmcmF4aFpOR1Nhd2hxTkdwWFlTRkM3YmkzNWVReGQ5Ym41N1BvZmdpc2o4SnpFaVo2cVRtbGMwc2R6QjJRbzhKZEI4YTVMTWRTSnRTT1ZIMTJmaUlvTzJ6NlUzMDNDTldsL0ZGSk9tN0xsNFpha0YxRkU0TGwrdUppbTgzVmc3KzRYMFhRd3ZpQ0dzYU1CWkZoREZ4cksyZVljZHJiUG1qK0pNVGpYSmgrVEpDQ
2023-10-12 21:30:02 UTC	212	IN	Data Raw: 6c 77 51 6c 5a 69 55 69 39 46 57 58 6c 4b 56 30 5a 74 53 32 5a 4e 53 31 4e 79 57 55 46 78 61 54 68 4d 59 6c 55 31 62 69 74 79 62 45 46 34 53 6d 78 73 53 6c 42 42 61 46 6c 76 4e 55 4d 33 63 56 5a 34 54 57 6c 46 56 6c 49 35 4d 31 42 79 5a 32 46 32 64 44 42 47 54 44 52 68 4c 79 74 50 4c 7a 64 77 55 33 4a 56 4d 6b 64 31 51 79 74 43 4e 54 5a 47 59 7a 41 32 63 32 5a 36 56 45 6c 42 54 45 31 35 55 6c 5a 75 59 6b 6c 7a 5a 6d 5a 70 52 30 68 50 4e 30 5a 72 54 55 35 75 63 32 4e 59 54 55 52 70 65 48 46 58 57 6c 6c 6b 59 32 4e 34 55 58 46 6d 62 32 78 42 52 55 34 76 63 6c 4e 55 55 32 68 51 61 55 52 44 57 56 5a 57 57 56 49 33 56 55 68 61 4d 6b 31 74 65 44 6c 77 62 48 51 33 61 48 63 7a 4e 46 5a 6c 62 45 55 79 51 6d 56 74 65 6a 56 55 51 6b 64 43 5a 45 52 59 4e 47 74 31 59 Data Ascii: lwQlZiUi9FWXlKV0ZtS2ZNS1NyWUFxaThMYlU1bitybEF4SmxsSlBBaFlvNUM3cVZ4TWlFVlI5M1ByZ2F2dDBGTDRhLytPLzdwU3JVMkd1QytCNTZGYzA2c2Z6VElBTE15UlZuYklzZmZpR0hPN0ZrTU5uc2NYTURpeHFXWllkY2N4UXFmb2xBRU4vclNUU2hQaURDWVZWWVI3VUhaMk1teDlwbHQ3aHczNFZlbEUyQmVtejVUQkdCZERYNGt1Y
2023-10-12 21:30:02 UTC	214	IN	Data Raw: 5a 4d 59 53 39 6a 4e 32 56 30 61 47 39 47 64 55 77 78 55 6c 5a 77 55 6c 56 6e 54 7a 5a 78 4d 57 4a 4e 62 54 6c 34 51 7a 4d 35 53 56 5a 78 63 31 56 54 52 45 38 32 64 7a 52 32 61 6d 6f 32 4e 30 64 50 4e 58 55 34 57 47 4d 35 4e 56 46 52 5a 7a 4e 42 57 47 46 61 4c 7a 51 7a 54 46 42 4a 62 7a 56 5a 53 30 74 70 52 79 39 49 57 6a 5a 68 54 6e 64 51 64 46 70 4a 54 33 64 42 53 6b 46 36 65 58 6c 56 4f 58 49 72 53 55 46 74 57 47 31 54 51 32 70 46 59 31 46 48 54 45 4e 30 51 33 70 69 61 56 67 77 5a 6d 55 33 54 47 39 73 62 32 39 68 56 48 4d 31 64 44 41 31 57 44 4a 34 5a 7a 6c 4d 53 6d 56 76 52 54 6c 48 52 32 78 42 62 55 64 53 5a 57 78 70 4d 57 78 6b 5a 45 34 34 5a 6e 68 6f 65 6a 6c 5a 52 56 63 33 65 6c 67 31 54 47 78 5a 52 31 4e 55 55 32 52 50 51 58 64 55 4d 57 56 55 54 Data Ascii: ZMYS9jN2V0aG9GdUwxUlZwUlVnTzZxMWJNbTl4QzM5SVZxc1VTRE82dzR2amo2N0dPNXU4WGM5NVFRZzNBWGFaLzQzTFBJbzVZS0tpRy9IWjZhTndQdFpJT3dBSkF6eXlVOXIrSUFtWG1TQ2pFY1FHTEN0Q3piaVgwZmU3TG9sb29hVHM1dDA1WDJ4ZzlMSmVvRTlHR2xBbUdSZWxpMWxkZE44ZnhoejlZRVc3elg1TGxZR1NUU2RPQXdUMWVUT
2023-10-12 21:30:02 UTC	215	IN	Data Raw: 4a 47 64 47 4a 6d 5a 57 49 35 4d 44 51 30 4b 7a 42 75 64 45 70 77 52 31 49 31 55 6d 56 33 64 33 6c 53 63 46 56 45 61 6c 6c 71 56 31 56 33 4b 30 4d 30 54 56 56 47 56 44 46 32 57 44 52 6e 5a 6b 56 77 51 57 56 70 4e 55 74 68 53 44 64 46 61 54 4e 58 65 48 4e 4c 4f 56 4a 76 53 55 4d 79 51 57 64 45 51 57 39 58 53 6e 46 79 53 31 45 30 61 31 64 56 61 30 4e 4c 64 30 39 61 4b 30 68 73 5a 43 74 6e 61 44 46 4e 56 55 49 34 55 6d 6f 78 5a 31 52 50 56 44 42 69 55 7a 4d 35 61 57 56 74 59 6b 52 35 59 54 56 46 63 6c 64 56 62 47 52 7a 55 48 4a 48 63 54 68 59 63 57 31 33 52 6c 68 30 5a 46 42 70 59 53 38 34 55 57 67 30 52 30 74 68 53 47 78 4f 5a 7a 56 53 65 45 31 6e 57 57 55 7a 4e 58 64 79 5a 58 68 69 56 6c 5a 45 52 44 41 32 4d 55 5a 71 54 48 42 56 55 33 51 78 4b 33 5a 55 56 Data Ascii: JGdGJmZWI5MDQ0KzBudEpwR1I1UmV3d3lScFVEallqV1V3K0M0TVVGVDF2WDRnZkVwQWVpNUthSDdFaTNXeHNLOVJvSUMyQWdEQW9XSnFyS1E0a1dVa0NLd09aK0hsZCtnaDFNVUI4UmoxZ1RPVDBiUzM5aWVtYkR5YTVFcldVbGRzUHJHcThYcW13Rlh0ZFBpYS84UWg0R0thSGxOZzVSeE1nWWUzNXdyZXhiVlZERDA2MUZqTHBVU3QxK3ZUV
2023-10-12 21:30:02 UTC	216	IN	Data Raw: 64 4c 51 56 64 75 4e 6d 35 52 61 48 6c 33 53 56 4e 30 61 56 63 72 57 57 70 55 4d 32 35 58 4e 57 68 6d 53 56 4a 4d 4e 6e 70 47 52 33 42 30 63 6d 39 6c 52 56 51 34 4d 6b 73 34 63 46 68 78 53 30 39 79 4f 46 52 53 53 30 39 55 64 33 70 78 61 56 4e 6f 51 6c 63 34 4e 32 64 6b 64 6d 64 45 51 57 39 52 52 6e 52 35 4e 31 46 56 51 6e 64 36 63 44 52 33 53 43 39 71 53 31 4a 33 4e 6e 42 58 5a 30 74 4b 52 47 6b 76 65 69 74 55 62 45 4e 4e 59 33 46 79 57 47 74 31 4b 31 46 30 5a 57 70 75 63 58 5a 4a 54 6e 5a 4e 54 58 49 34 54 54 46 4f 5a 31 4a 58 4f 54 56 45 51 6e 6c 30 57 44 45 34 59 58 56 34 59 6b 56 55 62 31 52 44 4e 54 4a 61 62 33 64 52 4d 6a 52 55 55 6d 56 31 5a 6e 42 58 52 47 6b 35 4f 58 64 47 62 44 59 32 54 31 52 68 4b 31 56 57 52 48 68 6d 4e 31 70 53 54 7a 51 30 62 Data Ascii: dLQVduNm5RaHl3SVN0aVcrWWpUM25XNWhmSVJMNnpGR3B0cm9lRVQ4Mks4cFhxS09yOFRSS09Ud3pxaVNoQlc4N2dkdmdEQW9RRnR5N1FVQnd6cDR3SC9qS1J3NnBXZ0tKRGkveitUbENNY3FyWGt1K1F0ZWpucXZJTnZNTXI4TTFOZ1JXOTVEQnl0WDE4YXV4YkVUb1RDNTJab3dRMjRUUmV1ZnBXRGk5OXdGbDY2T1RhK1VWRHhmN1pSTzQ0b
2023-10-12 21:30:02 UTC	217	IN	Data Raw: 78 32 52 48 46 47 64 48 67 78 59 30 6c 59 54 56 67 78 65 45 78 74 55 58 68 71 64 6d 77 32 4e 54 68 47 4e 57 78 35 65 47 34 76 4d 54 6c 4b 52 6a 64 78 61 48 49 7a 63 47 38 72 56 33 4a 72 53 6b 78 30 4e 55 35 5a 57 58 64 6d 61 53 39 4a 65 6d 31 54 57 6e 56 49 61 6d 74 52 64 6b 4e 42 4d 6a 46 77 55 30 31 4b 5a 46 56 6a 4e 55 46 33 52 46 4a 44 4e 6d 39 68 62 44 68 4f 57 6d 4e 4b 4e 48 64 59 64 6e 6c 35 65 6b 39 4f 53 6c 6c 5a 56 6a 56 57 5a 6c 63 30 53 44 49 31 53 54 5a 4f 62 31 70 42 51 6b 6c 46 55 7a 6c 77 65 45 52 51 54 33 52 53 59 6b 74 4e 4d 33 5a 4d 65 6e 6f 7a 53 32 56 57 56 6e 70 48 65 6a 46 45 51 6c 4e 31 4e 45 46 42 56 6c 4a 72 59 33 51 30 54 6d 6c 56 54 47 68 52 52 32 4e 30 4f 58 4e 33 51 7a 68 76 56 45 35 70 61 58 68 4e 57 6a 4a 6d 4d 44 52 33 56 Data Ascii: x2RHFGdHgxY0lYTVgxeExtUXhqdmw2NThGNWx5eG4vMTlKRjdxaHIzcG8rV3JrSkx0NU5ZWXdmaS9Jem1TWnVIamtRdkNBMjFwU01KZFVjNUF3RFJDNm9hbDhOWmNKNHdYdnl5ek9OSllZVjVWZlc0SDI1STZOb1pBQklFUzlweERQT3RSYktNM3ZMenozS2VWVnpHejFEQlN1NEFBVlJrY3Q0TmlVTGhRR2N0OXN3QzhvVE5paXhNWjJmMDR3V
2023-10-12 21:30:02 UTC	219	IN	Data Raw: 67 79 4b 30 39 56 52 6d 56 44 56 55 56 69 61 58 4e 6d 63 6d 4a 4d 55 6e 59 7a 55 6b 35 4e 4d 45 4e 58 59 6c 68 5a 51 54 4d 34 4d 30 68 76 64 54 68 51 55 57 4d 32 55 7a 4a 52 59 31 68 55 56 46 52 49 64 30 56 45 62 45 78 48 65 46 6c 69 54 31 46 61 57 45 46 4e 54 32 39 49 57 6e 67 34 55 45 31 35 64 47 46 57 4f 43 39 6f 54 45 4d 32 53 46 42 31 59 6d 59 79 54 6b 6c 55 62 56 46 59 4d 6d 46 42 63 44 68 4a 5a 44 4a 71 53 30 74 59 4e 54 4a 6d 56 45 4e 61 64 6c 5a 4d 51 6d 64 73 53 30 6c 42 54 6e 5a 35 59 57 5a 79 54 30 4a 50 53 44 45 34 4e 30 78 6e 4d 6e 68 4e 61 44 4a 69 64 55 4e 53 53 45 64 6e 4e 6d 5a 32 53 6b 4a 45 4e 55 64 70 62 58 64 51 5a 6b 64 4f 52 55 35 76 4c 32 39 78 59 6b 39 4b 4d 45 45 78 56 45 67 76 54 57 31 56 63 54 67 34 51 55 5a 76 4d 32 31 7a 59 Data Ascii: gyK09VRmVDVUViaXNmcmJMUnYzUk5NMENXYlhZQTM4M0hvdThQUWM2UzJRY1hUVFRId0VEbExHeFliT1FaWEFNT29IWng4UE15dGFWOC9oTEM2SFB1YmYyTklUbVFYMmFBcDhJZDJqS0tYNTJmVENadlZMQmdsS0lBTnZ5YWZyT0JPSDE4N0xnMnhNaDJidUNSSEdnNmZ2SkJENUdpbXdQZkdORU5vL29xYk9KMEExVEgvTW1VcTg4QUZvM21zY
2023-10-12 21:30:03 UTC	220	IN	Data Raw: 70 51 63 48 49 78 59 32 38 72 5a 45 77 33 61 6b 68 4d 4f 48 56 4d 65 6d 78 4f 59 31 68 54 65 44 42 59 4f 56 5a 32 57 6a 52 4a 56 55 64 6a 57 6c 6b 34 4c 33 42 6b 51 7a 51 35 4e 6d 30 33 4c 30 5a 74 63 54 45 33 59 69 38 33 52 57 74 61 55 6a 5a 71 53 6d 35 30 61 47 59 77 62 69 73 7a 53 47 39 6d 53 6a 4e 7a 61 6a 49 30 4d 54 4a 6c 64 30 70 4f 63 32 38 78 64 57 70 34 5a 48 64 61 4d 56 70 52 4e 7a 5a 51 4e 32 4a 50 4d 6a 6c 7a 4f 53 74 51 4e 6d 5a 32 5a 54 46 6b 54 44 4e 57 61 7a 59 35 64 6a 4a 4b 54 30 46 44 64 7a 42 31 54 6e 46 78 4f 58 4e 7a 55 44 6c 4e 54 32 4e 46 63 7a 52 6c 59 57 35 31 54 6b 4a 6d 4d 32 6c 6e 54 45 78 57 62 31 6b 77 4d 43 39 30 52 48 46 35 4e 6e 45 77 52 6b 6f 7a 4d 47 52 4c 4c 30 39 6d 61 45 6b 35 63 69 74 52 63 32 56 49 61 53 74 61 5a Data Ascii: pQcHIxY28rZEw3akhMOHVMemxOY1hTeDBYOVZ2WjRJVUdjWlk4L3BkQzQ5Nm03L0ZtcTE3Yi83RWtaUjZqSm50aGYwbiszSG9mSjNzajI0MTJld0pOc28xdWp4ZHdaMVpRNzZQN2JPMjlzOStQNmZ2ZTFkTDNWazY5djJKT0FDdzB1TnFxOXNzUDlNT2NFczRlYW51TkJmM2lnTExWb1kwMC90RHF5NnEwRkozMGRLL09maEk5citRc2VIaStaZ
2023-10-12 21:30:03 UTC	221	IN	Data Raw: 56 47 4e 55 64 4d 53 46 4a 78 52 32 46 48 4d 31 6c 43 4e 53 74 34 4e 45 64 4c 53 53 39 4e 57 55 68 6d 54 57 6c 6e 53 45 56 58 54 6e 49 77 4e 55 63 35 62 6a 63 30 4d 6c 64 72 4f 48 68 73 62 48 70 56 61 6d 4e 74 65 6e 56 6d 55 54 42 51 63 6e 51 78 53 32 74 75 59 54 6c 31 5a 6e 70 45 52 6d 5a 57 62 57 46 6e 54 55 6c 4b 4e 6c 46 45 52 44 42 36 56 7a 68 31 65 43 38 30 59 58 5a 58 63 58 70 70 53 7a 52 79 4f 46 5a 4a 51 30 56 44 53 6e 70 48 63 57 77 77 5a 33 4e 51 53 55 39 47 53 6a 4a 72 63 6c 5a 6e 5a 48 6c 72 56 55 52 61 4f 47 5a 79 65 6b 68 58 59 31 52 71 57 55 70 79 56 30 5a 78 59 7a 5a 36 55 31 63 33 4d 46 55 7a 5a 30 45 72 51 6e 52 75 64 56 68 51 51 6c 42 6f 63 31 59 30 56 6c 41 32 62 32 68 50 61 6e 46 54 55 30 4e 78 51 7a 41 33 64 56 70 34 51 57 68 6c 56 Data Ascii: VGNUdMSFJxR2FHM1lCNSt4NEdLSS9NWUhmTWlnSEVXTnIwNUc5bjc0MldrOHhsbHpVamNtenVmUTBQcnQxS2tuYTl1ZnpERmZWbWFnTUlKNlFERDB6Vzh1eC80YXZXcXppSzRyOFZJQ0VDSnpHcWwwZ3NQSU9GSjJrclZnZHlrVURaOGZyekhXY1RqWUpyV0ZxYzZ6U1c3MFUzZ0ErQnRudVhQQlBoc1Y0VlA2b2hPanFTU0NxQzA3dVp4QWhlV
2023-10-12 21:30:03 UTC	222	IN	Data Raw: 6b 76 56 44 67 79 53 7a 68 73 4c 7a 4e 75 4e 69 74 68 63 6b 73 77 4e 31 6c 50 59 6c 6f 79 63 45 31 76 64 31 70 6a 55 7a 64 33 4d 57 70 32 5a 30 74 4e 62 45 64 48 59 6c 4d 33 62 32 78 6a 4d 33 5a 6f 55 30 68 61 5a 54 6c 46 56 30 64 74 63 56 6f 33 5a 44 51 32 4e 31 56 6a 52 44 4a 4d 54 30 31 57 5a 46 64 49 62 6a 46 56 56 6a 4e 33 51 33 45 77 53 44 4a 6e 65 45 78 48 51 6b 68 68 65 6c 6f 72 55 47 34 79 5a 6e 68 7a 4d 55 68 6c 61 45 56 35 63 6b 55 5c 5c 75 30 30 33 64 5c 78 32 32 2c 5c 78 32 32 5a 63 4f 50 54 63 4f 51 77 71 74 67 77 37 72 44 69 79 45 77 77 36 72 44 6b 63 4b 5a 57 43 58 43 76 73 4b 54 77 37 70 32 77 71 37 43 6d 73 4b 72 46 63 4f 45 65 31 6e 43 76 69 6e 44 6f 67 58 43 6f 32 76 43 6b 68 37 44 6f 58 35 35 77 6f 35 57 77 6f 33 44 74 4d 4f 4c 77 37 Data Ascii: kvVDgySzhsLzNuNithckswN1lPYloycE1vd1pjUzd3MWp2Z0tNbEdHYlM3b2xjM3ZoU0haZTlFV0dtcVo3ZDQ2N1VjRDJMT01WZFdIbjFVVjN3Q3EwSDJneExHQkhhelorUG4yZnhzMUhlaEV5ckU\\u003d\x22,\x22ZcOPTcOQwqtgw7rDiyEww6rDkcKZWCXCvsKTw7p2wq7CmsKrFcOEe1nCvinDogXCo2vCkh7DoX55wo5Wwo3DtMOLw7
2023-10-12 21:30:03 UTC	223	IN	Data Raw: 74 48 73 4f 32 47 38 4f 70 4a 4d 4b 76 42 38 4f 6e 77 37 41 45 77 70 59 6a 56 73 4f 36 77 36 5a 35 56 51 4d 57 49 45 4a 30 42 4d 4b 68 66 54 39 77 4e 30 74 6e 77 72 6e 44 6c 38 4f 2f 77 34 46 58 77 36 52 38 77 34 41 4e 77 72 4e 6e 4f 43 74 76 62 33 58 44 75 38 4b 5a 77 37 41 77 63 32 54 44 6a 4d 4f 7a 56 38 4b 4b 77 37 37 44 6b 38 4f 2b 65 73 4b 67 54 42 48 44 67 6c 6e 43 75 68 59 70 77 72 48 43 6c 73 4f 2f 64 6a 66 43 68 4d 4f 74 5a 4d 4b 43 77 6f 34 62 77 37 37 44 71 69 38 71 77 70 31 4b 4a 6d 34 77 77 72 37 44 71 6c 2f 43 6a 38 4f 5a 48 38 4f 36 77 37 58 44 67 38 4f 42 77 72 76 43 71 67 50 44 69 63 4b 34 56 73 4f 75 77 72 51 37 77 71 76 44 6c 4d 4b 44 77 35 33 43 6d 73 4b 79 59 38 4b 66 58 58 6c 39 63 4d 4b 33 4e 53 62 44 6f 67 62 44 6f 63 4b 72 45 63 Data Ascii: tHsO2G8OpJMKvB8Onw7AEwpYjVsO6w6Z5VQMWIEJ0BMKhfT9wN0tnwrnDl8O/w4FXw6R8w4ANwrNnOCtvb3XDu8KZw7Awc2TDjMOzV8KKw77Dk8O+esKgTBHDglnCuhYpwrHClsO/djfChMOtZMKCwo4bw77Dqi8qwp1KJm4wwr7Dql/Cj8OZH8O6w7XDg8OBwrvCqgPDicK4VsOuwrQ7wqvDlMKDw53CmsKyY8KfXXl9cMK3NSbDogbDocKrEc
2023-10-12 21:30:03 UTC	225	IN	Data Raw: 43 76 73 4b 46 4b 52 37 43 6b 43 7a 44 6b 4d 4f 42 4c 38 4f 77 48 77 63 59 77 35 59 73 77 34 4a 51 59 32 48 43 6a 78 31 71 77 71 77 4c 77 36 42 72 43 48 67 4d 53 4d 4f 50 4b 4d 4f 6b 61 63 4b 54 50 4d 4f 54 77 36 4e 62 77 35 62 43 76 4d 4f 43 4c 30 62 43 6b 41 56 34 77 70 45 49 4c 38 4b 48 77 70 2f 44 6e 58 68 62 56 57 6a 44 6d 77 58 44 6f 78 39 6d 77 37 7a 43 73 30 6f 4a 56 63 4f 74 45 67 44 43 72 6c 66 43 72 67 4a 34 61 52 33 44 6a 63 4f 72 77 36 49 45 51 73 4b 62 4f 73 4f 35 77 70 64 78 77 6f 41 39 77 72 4d 53 4d 47 46 2b 77 70 6e 44 68 4d 4b 64 77 71 6e 43 74 57 34 5a 77 71 37 43 72 48 4a 52 4d 55 4a 53 65 4d 4f 33 77 72 58 43 68 6a 6a 44 73 53 6b 2b 77 36 7a 44 72 46 39 58 47 77 59 34 46 4d 4b 37 48 46 50 43 6c 63 4f 43 77 6f 62 44 6c 63 4b 5a 64 6d Data Ascii: CvsKFKR7CkCzDkMOBL8OwHwcYw5Ysw4JQY2HCjx1qwqwLw6BrCHgMSMOPKMOkacKTPMOTw6Nbw5bCvMOCL0bCkAV4wpEIL8KHwp/DnXhbVWjDmwXDox9mw7zCs0oJVcOtEgDCrlfCrgJ4aR3DjcOrw6IEQsKbOsO5wpdxwoA9wrMSMGF+wpnDhMKdwqnCtW4Zwq7CrHJRMUJSeMO3wrXChjjDsSk+w6zDrF9XGwY4FMK7HFPClcOCwobDlcKZdm
2023-10-12 21:30:03 UTC	226	IN	Data Raw: 64 48 47 38 42 59 30 4c 43 6b 33 38 49 55 48 64 69 48 42 63 4b 44 4d 4b 4d 4f 45 66 43 71 73 4f 4d 61 73 4f 6a 77 36 6a 43 6a 63 4f 39 65 45 30 59 5a 77 44 43 6c 73 4f 75 49 73 4b 73 77 37 66 44 6b 48 76 44 76 45 44 44 74 63 4f 73 77 6f 72 43 67 6e 31 5a 41 63 4b 44 77 6f 6e 43 69 79 54 43 67 48 48 43 6d 63 4b 77 77 70 37 44 6e 38 4f 79 61 45 68 73 4a 58 44 44 73 58 73 6a 64 44 6b 45 49 73 4f 4c 77 72 50 43 71 55 68 49 63 57 39 44 64 48 7a 43 75 73 4b 61 63 4d 4b 30 65 73 4f 49 4d 4d 4f 37 4a 38 4f 74 77 72 55 64 61 31 54 44 6d 4d 4b 35 47 46 37 44 73 63 4f 4f 77 36 55 48 4d 63 4f 4c 77 37 70 58 77 72 48 43 69 6e 46 66 77 72 58 44 72 6c 49 6c 48 73 4f 6f 51 38 4f 79 65 4d 4f 51 47 47 44 43 6b 33 37 43 76 51 64 45 77 71 76 44 71 78 6e 43 6d 31 34 67 49 55 Data Ascii: dHG8BY0LCk38IUHdiHBcKDMKMOEfCqsOMasOjw6jCjcO9eE0YZwDClsOuIsKsw7fDkHvDvEDDtcOsworCgn1ZAcKDwonCiyTCgHHCmcKwwp7Dn8OyaEhsJXDDsXsjdDkEIsOLwrPCqUhIcW9DdHzCusKacMK0esOIMMO7J8OtwrUda1TDmMK5GF7DscOOw6UHMcOLw7pXwrHCinFfwrXDrlIlHsOoQ8OyeMOQGGDCk37CvQdEwqvDqxnCm14gIU
2023-10-12 21:30:03 UTC	227	IN	Data Raw: 33 52 46 49 53 52 55 7a 43 70 55 37 43 74 48 39 6a 77 34 64 33 58 4d 4f 78 4d 6a 49 74 77 36 48 43 74 38 4f 49 77 6f 6e 44 70 6e 30 34 42 63 4f 64 77 71 35 38 53 46 45 61 77 71 48 43 75 63 4b 71 77 6f 7a 43 6d 73 4f 4f 77 35 7a 43 6b 4d 4f 53 77 35 72 44 70 73 4f 48 66 57 4e 33 77 70 4c 43 6f 54 4a 34 4f 7a 33 44 6f 73 4f 50 58 73 4f 44 77 36 48 43 69 38 4f 33 77 37 6c 77 77 70 66 43 71 63 4b 32 77 70 44 44 6e 63 4b 4b 47 48 58 44 6e 6e 5a 54 77 37 7a 44 74 47 44 43 74 42 50 43 68 63 4b 74 77 72 73 49 46 73 4b 45 55 4d 4b 72 64 6b 37 43 70 41 6c 4d 77 70 44 43 6c 63 4f 71 77 36 4e 66 77 37 33 44 6c 4d 4f 4e 77 71 37 44 6b 6e 4a 4e 49 38 4f 43 77 72 7a 43 76 63 4b 4f 77 37 39 5a 51 38 4f 6f 66 58 76 43 70 38 4f 4b 44 52 6a 43 69 63 4b 74 58 38 4b 38 42 56 Data Ascii: 3RFISRUzCpU7CtH9jw4d3XMOxMjItw6HCt8OIwonDpn04BcOdwq58SFEawqHCucKqwozCmsOOw5zCkMOSw5rDpsOHfWN3wpLCoTJ4Oz3DosOPXsODw6HCi8O3w7lwwpfCqcK2wpDDncKKGHXDnnZTw7zDtGDCtBPChcKtwrsIFsKEUMKrdk7CpAlMwpDClcOqw6Nfw73DlMONwq7DknJNI8OCwrzCvcKOw79ZQ8OofXvCp8OKDRjCicKtX8K8BV
2023-10-12 21:30:03 UTC	228	IN	Data Raw: 70 77 35 41 49 77 36 7a 44 67 4d 4b 43 77 35 5a 75 53 68 66 44 6c 4d 4f 4c 42 78 44 43 76 63 4b 43 77 6f 70 56 64 31 4a 33 77 71 4a 4e 65 73 4f 58 77 6f 58 43 69 73 4f 4f 43 51 6f 75 77 70 67 6c 5a 4d 4f 2f 77 71 46 52 41 53 5a 6d 77 34 4a 55 63 55 48 44 70 4d 4b 48 5a 52 50 44 76 6b 73 32 62 73 4b 4b 77 71 7a 44 74 63 4f 66 77 34 50 44 69 38 4b 6c 77 37 74 51 77 34 76 43 6b 73 4b 76 77 34 6c 6f 77 6f 7a 43 6f 38 4f 54 77 70 33 44 70 38 4f 6e 57 42 6c 6b 77 36 54 43 6e 73 4f 75 77 70 62 43 6d 48 6c 4a 5a 69 64 2b 77 35 6e 43 6e 38 4f 63 51 57 6a 43 74 79 48 44 6f 73 4f 76 46 32 4c 43 68 63 4b 44 50 38 4b 36 77 72 58 43 71 63 4b 4e 77 35 6a 43 70 73 4b 62 77 35 35 6d 77 36 4e 39 77 37 56 39 77 37 7a 44 6e 41 2f 43 73 6e 62 44 74 69 6a 44 75 38 4b 31 77 36 Data Ascii: pw5AIw6zDgMKCw5ZuShfDlMOLBxDCvcKCwopVd1J3wqJNesOXwoXCisOOCQouwpglZMO/wqFRASZmw4JUcUHDpMKHZRPDvks2bsKKwqzDtcOfw4PDi8Klw7tQw4vCksKvw4lowozCo8OTwp3Dp8OnWBlkw6TCnsOuwpbCmHlJZid+w5nCn8OcQWjCtyHDosOvF2LChcKDP8K6wrXCqcKNw5jCpsKbw55mw6N9w7V9w7zDnA/CsnbDtijDu8K1w6
2023-10-12 21:30:03 UTC	230	IN	Data Raw: 33 77 34 54 44 74 55 6c 70 64 73 4f 63 50 63 4b 35 50 63 4f 4a 4b 38 4f 76 4e 52 37 44 6f 4d 4b 65 77 6f 38 6a 47 6a 72 43 72 6a 7a 44 73 38 4f 48 77 36 7a 43 6c 6e 30 6a 77 72 68 4a 77 6f 76 44 6f 6a 58 43 6e 56 42 30 77 70 48 44 6a 63 4b 38 77 37 62 44 6c 6d 42 53 77 35 56 42 53 63 4b 59 47 38 4f 79 77 34 52 37 43 63 4b 5a 62 6e 55 76 77 6f 6a 44 6e 42 72 44 6c 4d 4f 61 77 35 51 4a 4e 63 4b 4a 66 79 30 69 77 71 6c 31 77 71 45 6e 43 57 48 44 6a 52 63 63 77 6f 6c 6b 77 34 6c 75 77 34 33 44 70 58 76 43 68 33 49 43 77 36 6e 43 6b 77 4d 63 4a 46 2f 43 70 56 6c 49 77 71 4c 43 71 6b 6a 44 68 46 58 43 76 4d 4b 4f 47 56 73 4c 77 6f 37 43 76 51 2f 44 6c 41 33 44 6a 38 4f 32 77 37 4c 44 69 4d 4b 79 77 37 52 70 77 6f 56 36 4a 44 6a 44 6c 55 39 49 77 35 54 43 68 73 Data Ascii: 3w4TDtUlpdsOcPcK5PcOJK8OvNR7DoMKewo8jGjrCrjzDs8OHw6zCln0jwrhJwovDojXCnVB0wpHDjcK8w7bDlmBSw5VBScKYG8Oyw4R7CcKZbnUvwojDnBrDlMOaw5QJNcKJfy0iwql1wqEnCWHDjRccwolkw4luw43DpXvCh3ICw6nCkwMcJF/CpVlIwqLCqkjDhFXCvMKOGVsLwo7CvQ/DlA3Dj8O2w7LDiMKyw7RpwoV6JDjDlU9Iw5TChs
2023-10-12 21:30:03 UTC	231	IN	Data Raw: 44 71 73 4b 42 54 73 4b 34 77 72 78 35 44 63 4f 69 66 63 4b 68 59 41 68 69 65 73 4f 38 43 44 73 4c 77 6f 39 69 77 34 41 46 50 63 4b 32 54 4d 4f 4e 77 6f 50 43 71 32 50 43 6e 54 73 45 48 73 4f 6d 77 6f 76 44 6f 54 55 35 56 38 4b 58 4a 38 4f 33 63 6e 51 61 77 37 44 44 68 4d 4f 59 44 6d 4c 44 71 73 4b 47 77 34 70 6d 66 7a 58 44 6e 73 4b 53 77 36 52 4d 58 63 4f 38 51 51 6a 44 6d 48 74 32 77 6f 6c 31 77 34 44 44 6a 38 4f 63 58 63 4f 43 77 71 76 43 6f 38 4b 68 77 36 48 43 72 33 56 79 77 70 48 43 74 4d 4b 64 50 77 33 44 71 73 4f 38 77 37 46 48 4c 38 4b 65 4e 6a 55 2f 4a 38 4b 4a 52 73 4f 34 77 34 44 44 73 6d 77 6f 4f 63 4f 4f 54 73 4b 6f 77 34 66 43 67 43 6a 43 6f 63 4f 52 65 63 4f 76 4b 51 4c 43 6c 63 4b 2f 48 63 4b 61 77 35 51 39 5a 53 49 64 4e 63 4b 47 50 63 Data Ascii: DqsKBTsK4wrx5DcOifcKhYAhiesO8CDsLwo9iw4AFPcK2TMONwoPCq2PCnTsEHsOmwovDoTU5V8KXJ8O3cnQaw7DDhMOYDmLDqsKGw4pmfzXDnsKSw6RMXcO8QQjDmHt2wol1w4DDj8OcXcOCwqvCo8Khw6HCr3VywpHCtMKdPw3DqsO8w7FHL8KeNjU/J8KJRsO4w4DDsmwoOcOOTsKow4fCgCjCocORecOvKQLClcK/HcKaw5Q9ZSIdNcKGPc
2023-10-12 21:30:03 UTC	232	IN	Data Raw: 38 51 73 4f 5a 77 34 70 48 4a 54 33 44 75 63 4f 57 77 36 58 44 70 38 4f 48 77 70 7a 43 6c 63 4b 45 77 35 49 41 43 4d 4b 71 77 6f 2f 44 74 4d 4f 63 51 79 62 43 74 38 4b 6a 66 73 4f 58 77 35 31 62 77 70 6a 43 6a 63 4b 50 77 71 70 61 4c 73 4f 77 57 63 4b 48 77 6f 6f 4c 77 72 4c 43 67 4d 4b 51 5a 57 44 44 70 38 4b 51 77 37 76 44 76 33 4d 73 77 6f 34 47 48 4d 4b 43 77 72 31 76 52 58 66 44 71 38 4b 38 49 32 74 49 77 36 4c 43 6e 6c 35 6b 77 70 54 44 75 47 0d 0a Data Ascii: 8QsOZw4pHJT3DucOWw6XDp8OHwpzClcKEw5IACMKqwo/DtMOcQybCt8KjfsOXw51bwpjCjcKPwqpaLsOwWcKHwooLwrLCgMKQZWDDp8KQw7vDv3Mswo4GHMKCwr1vRXfDq8K8I2tIw6LCnl5kwpTDuG
2023-10-12 21:30:03 UTC	232	IN	Data Raw: 33 0d 0a 76 43 6c 0d 0a Data Ascii: 3vCl
2023-10-12 21:30:03 UTC	232	IN	Data Raw: 31 31 62 64 0d 0a 52 54 44 67 41 2f 43 73 79 6c 38 77 71 4c 44 70 38 4b 47 77 70 6e 43 73 38 4f 65 77 71 4d 31 59 73 4f 72 5a 73 4b 50 51 4d 4b 61 43 68 48 43 6a 38 4b 35 4d 54 78 65 77 6f 33 44 6e 6b 64 56 77 71 55 46 4b 51 59 4d 4a 78 4a 55 77 37 76 43 6b 73 4f 4d 77 70 58 44 75 63 4b 30 77 37 46 73 77 37 41 39 57 42 49 2b 77 71 74 6e 63 7a 58 43 74 63 4f 4f 77 34 48 44 67 4d 4b 52 77 37 2f 44 67 77 44 44 74 55 63 7a 77 35 33 43 76 4d 4f 79 4b 73 4f 4d 66 56 44 44 73 58 2f 44 72 33 54 43 6a 73 4b 35 61 77 4d 46 53 6b 7a 43 6a 46 50 44 6c 38 4b 33 77 35 35 6e 55 44 74 71 77 35 62 44 6b 79 4e 65 5a 6c 48 43 74 44 76 44 70 51 45 4a 63 51 62 43 6a 38 4b 71 58 63 4f 6c 53 42 51 5a 77 6f 78 47 53 73 4b 74 77 72 38 65 44 48 51 34 5a 4d 4b 30 77 34 2f 43 6e 38 Data Ascii: 11bdRTDgA/Csyl8wqLDp8KGwpnCs8OewqM1YsOrZsKPQMKaChHCj8K5MTxewo3DnkdVwqUFKQYMJxJUw7vCksOMwpXDucK0w7Fsw7A9WBI+wqtnczXCtcOOw4HDgMKRw7/DgwDDtUczw53CvMOyKsOMfVDDsX/Dr3TCjsK5awMFSkzCjFPDl8K3w55nUDtqw5bDkyNeZlHCtDvDpQEJcQbCj8KqXcOlSBQZwoxGSsKtwr8eDHQ4ZMK0w4/Cn8
2023-10-12 21:30:03 UTC	233	IN	Data Raw: 6f 55 73 4f 55 77 70 6a 44 71 63 4b 7a 77 37 44 44 67 57 51 63 77 35 51 34 77 35 56 4a 46 6e 45 77 64 43 52 47 77 72 6a 44 69 47 62 44 67 47 2f 43 69 68 54 44 67 43 37 44 72 6e 72 44 71 68 72 44 73 73 4f 4a 77 36 38 65 4c 6c 50 43 76 48 39 6e 47 73 4f 64 77 72 67 64 77 6f 76 43 71 63 4b 69 77 72 77 34 77 72 68 49 44 4d 4f 71 42 4d 4b 68 77 36 4e 74 46 63 4b 46 77 36 62 43 6b 73 4b 4e 77 34 67 36 77 37 52 34 77 35 6b 64 77 70 39 44 49 4d 4f 52 77 70 34 4f 47 53 7a 43 71 46 55 4e 77 70 72 44 71 45 62 43 76 73 4f 74 77 6f 38 53 4d 48 48 43 75 57 68 41 77 72 51 34 77 36 4a 56 5a 73 4b 53 4d 38 4f 59 77 37 52 35 77 36 74 51 77 37 6f 4a 77 71 56 32 49 78 44 44 69 67 4c 43 6f 58 7a 44 75 57 56 4b 77 70 50 44 76 38 4b 52 58 38 4b 45 77 34 6a 44 6e 63 4f 49 77 36 Data Ascii: oUsOUwpjDqcKzw7DDgWQcw5Q4w5VJFnEwdCRGwrjDiGbDgG/CihTDgC7DrnrDqhrDssOJw68eLlPCvH9nGsOdwrgdwovCqcKiwrw4wrhIDMOqBMKhw6NtFcKFw6bCksKNw4g6w7R4w5kdwp9DIMORwp4OGSzCqFUNwprDqEbCvsOtwo8SMHHCuWhAwrQ4w6JVZsKSM8OYw7R5w6tQw7oJwqV2IxDDigLCoXzDuWVKwpPDv8KRX8KEw4jDncOIw6
2023-10-12 21:30:03 UTC	235	IN	Data Raw: 35 52 63 4f 63 49 38 4b 76 77 6f 6c 69 4d 7a 45 6e 77 6f 6a 44 69 6c 49 4c 4e 38 4f 6b 77 71 6a 44 73 4d 4b 6e 77 34 68 75 77 36 66 43 75 44 52 75 52 78 42 51 4b 38 4b 41 48 4d 4b 65 77 37 30 4c 77 35 56 58 50 73 4f 76 4d 33 30 76 77 35 76 44 69 57 58 43 74 55 33 43 74 4d 4b 43 77 72 58 43 6e 4d 4b 4d 77 6f 52 65 77 35 46 4b 53 38 4b 6c 77 70 76 43 69 38 4b 70 42 45 58 43 6e 7a 49 55 77 72 44 44 71 48 55 43 77 71 55 54 62 63 4b 6f 43 63 4b 30 42 6c 70 54 77 72 4d 70 49 63 4f 55 77 6f 37 43 6e 73 4f 38 61 38 4f 37 4a 38 4f 35 77 72 5a 46 53 52 76 43 73 63 4b 65 43 4d 4f 5a 41 73 4b 6d 4c 69 6f 71 77 72 42 41 77 71 6c 34 61 73 4f 6d 77 35 76 43 6a 73 4f 38 77 70 6f 6a 4b 63 4b 54 65 6d 6c 62 77 35 4d 4f 77 70 66 43 67 6d 7a 44 6d 73 4f 41 77 35 6f 55 77 6f Data Ascii: 5RcOcI8KvwoliMzEnwojDilILN8OkwqjDsMKnw4huw6fCuDRuRxBQK8KAHMKew70Lw5VXPsOvM30vw5vDiWXCtU3CtMKCwrXCnMKMwoRew5FKS8KlwpvCi8KpBEXCnzIUwrDDqHUCwqUTbcKoCcK0BlpTwrMpIcOUwo7CnsO8a8O7J8O5wrZFSRvCscKeCMOZAsKmLioqwrBAwql4asOmw5vCjsO8wpojKcKTemlbw5MOwpfCgmzDmsOAw5oUwo
2023-10-12 21:30:03 UTC	236	IN	Data Raw: 2c 30 2c 5b 32 31 2c 36 33 2c 37 33 2c 39 35 2c 38 37 2c 34 31 2c 34 32 2c 38 33 5d 2c 5b 2d 34 34 32 31 31 38 32 2c 34 38 36 5d 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 2c 30 2c 6e 75 6c 6c 2c 30 5d 2c 5c 78 32 32 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 3a 34 34 33 5c 78 32 32 2c 5b 5c 78 32 32 63 74 61 73 6b 5c 78 32 32 2c 5b 5b 5c 78 32 32 68 63 74 61 73 6b 5c 78 32 32 2c 5c 78 32 32 36 63 64 34 38 37 66 31 5c 78 32 32 2c 5c 78 32 32 63 34 64 34 63 34 35 66 64 31 35 63 37 32 34 38 30 35 38 62 35 32 33 33 38 37 62 36 65 38 32 66 36 35 61 61 61 37 33 36 37 36 38 63 63 36 31 64 30 65 61 66 62 30 30 32 39 32 39 61 36 61 64 66 5c 78 32 32 2c 30 2c 31 30 30 5d 2c 5b 5c 78 32 32 68 63 74 61 73 6b 5c 78 32 32 2c 5c 78 32 32 Data Ascii: ,0,[21,63,73,95,87,41,42,83],[-4421182,486],0,null,null,1,25,0,null,0],\x22https://www.google.com:443\x22,[\x22ctask\x22,[[\x22hctask\x22,\x226cd487f1\x22,\x22c4d4c45fd15c7248058b523387b6e82f65aaa736768cc61d0eafb002929a6adf\x22,0,100],[\x22hctask\x22,\x22
2023-10-12 21:30:03 UTC	237	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.7	49734	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:04 UTC	237	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=lLirU0na9roYU3wDDisGJEVT HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&s=d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_NHyy8KsGnyzIW4wxFm7YtvIeJDbDRuG1KSlsE2LJbX0wDlh7uqCpO0V5iQ6MBk8cWfIJ6-qQoIrSCWcduwt0x0HTG0rBKhg3sJSQDY4pzd-Bk9kB7e8L0sg77YwItQwafkmsBnzHhdgVjrhaCNW5SH-ik4mSbN4ZdAOFwW08UkUh0DwJzDu0prxI&cb=6ec4st8hf4il Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	142.250.68.46	443	192.168.2.7	49702	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:51 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-YrC0b2x-B8MMaQEcOy_b5g' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 12 Oct 2023 21:29:51 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6128 X-Daystart: 52191 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:29:51 UTC	2	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 32 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 32 31 39 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6128" elapsed_seconds="52191"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-10-12 21:29:51 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-10-12 21:29:51 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	142.250.176.4	443	192.168.2.7	49734	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:04 UTC	238	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Expires: Thu, 12 Oct 2023 21:30:04 GMT Date: Thu, 12 Oct 2023 21:30:04 GMT Cache-Control: private, max-age=300 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:30:04 UTC	239	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 4c 69 72 55 30 6e 61 39 72 6f 59 55 33 77 44 44 69 73 47 4a 45 56 54 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js');
2023-10-12 21:30:04 UTC	239	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.7	49737	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:05 UTC	239	OUT	GET /recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	142.250.176.4	443	192.168.2.7	49737	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:05 UTC	241	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 12 Oct 2023 21:30:05 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-xUDs0OJto_ClUzHEHjg0mA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:30:05 UTC	242	IN	Data Raw: 31 63 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c4e<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-10-12 21:30:05 UTC	242	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-10-12 21:30:05 UTC	244	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-10-12 21:30:05 UTC	245	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-10-12 21:30:05 UTC	246	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-10-12 21:30:05 UTC	247	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-10-12 21:30:05 UTC	248	IN	Data Raw: 30 4f 4a 74 6f 5f 43 6c 55 7a 48 45 48 6a 67 30 6d 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 4c 69 72 55 30 6e 61 39 72 6f 59 55 33 77 44 44 69 73 47 4a 45 56 54 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 78 55 44 73 Data Ascii: 0OJto_ClUzHEHjg0mA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js" nonce="xUDs
2023-10-12 21:30:05 UTC	249	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.7	49739	20.114.59.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:08 UTC	249	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YZXA7hly1D+4YkO&MD=Yxv6RaK4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-10-12 21:30:08 UTC	249	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b9811058-675c-4048-99d4-0cf87743b2a4 MS-RequestId: e4b7f79c-991d-46ea-a516-8325bbd28ff2 MS-CV: oGSxhTcqlkOMfqow.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 12 Oct 2023 21:30:08 GMT Connection: close Content-Length: 24490
2023-10-12 21:30:08 UTC	250	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-10-12 21:30:08 UTC	265	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.7	49772	13.110.38.63	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:19 UTC	274	OUT	GET /embeddedservice/5.0/esw.min.js HTTP/1.1 Host: service.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	13.110.38.63	443	192.168.2.7	49772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:19 UTC	274	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 16:00:20 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Robots-Tag: none Cache-Control: public,max-age=86400 Expires: Fri, 13 Oct 2023 16:00:20 GMT Last-Modified: Tue, 04 Jul 2023 00:26:54 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Age: 19799 Content-Length: 30813 Connection: close
2023-10-12 21:30:19 UTC	275	IN	Data Raw: 2f 2a 0a 20 57 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2c 20 77 65 20 63 68 61 6e 67 65 64 20 6e 6f 6e 69 6e 63 6c 75 73 69 76 65 20 74 65 72 6d 73 20 74 6f 20 61 6c 69 67 6e 20 77 69 74 68 20 6f 75 72 20 63 6f 6d 70 61 6e 79 20 76 61 6c 75 65 20 6f 66 20 45 71 75 61 6c 69 74 79 2e 20 57 65 20 6d 61 69 6e 74 61 69 6e 65 64 20 63 65 72 74 61 69 6e 20 74 65 72 6d 73 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 65 66 66 65 63 74 20 6f 6e 20 63 75 73 74 6f 6d 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 20 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 21 31 2c 62 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 7b 61 70 70 65 6e 64 48 65 6c 70 42 75 74 74 6f 6e 3a 21 30 2c 64 69 73 70 6c 61 79 Data Ascii: /* Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations. */(function(l){function d(){var a=!1,b;this.settings={appendHelpButton:!0,display
2023-10-12 21:30:19 UTC	279	IN	Data Raw: 61 72 20 68 3d 61 26 26 61 2e 70 61 72 61 6d 73 4f 62 6a 3f 61 2e 70 61 72 61 6d 73 4f 62 6a 3a 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 67 65 74 4c 69 67 68 74 6e 69 6e 67 4f 75 74 50 61 72 61 6d 73 4f 62 6a 28 29 7c 7c 76 6f 69 64 20 30 3b 65 6d 62 65 64 64 65 64 5f 73 76 63 2e 75 74 69 6c 73 2e 69 73 43 6f 6d 6d 75 6e 69 74 79 4f 72 53 69 74 65 28 29 3f 62 28 22 43 6f 6d 6d 75 6e 69 74 69 65 73 20 63 6f 6e 74 65 78 74 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 6e 20 41 75 72 61 20 63 6f 6e 74 65 78 74 2e 22 29 3a 77 69 6e 64 6f 77 2e 24 4c 69 67 68 74 6e 69 6e 67 26 26 24 4c 69 67 68 74 6e 69 6e 67 2e 75 73 65 28 22 65 6d 62 65 64 64 65 64 53 65 72 76 69 63 65 3a 73 69 64 65 62 61 72 41 70 70 22 2c 0a 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 22 4c 69 67 68 Data Ascii: ar h=a&&a.paramsObj?a.paramsObj:embedded_svc.getLightningOutParamsObj()\|\|void 0;embedded_svc.utils.isCommunityOrSite()?b("Communities context already has an Aura context."):window.$Lightning&&$Lightning.use("embeddedService:sidebarApp",function(){b("Ligh
2023-10-12 21:30:19 UTC	283	IN	Data Raw: 28 61 2c 62 2c 63 29 7b 69 66 28 28 63 7c 7c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 64 65 76 4d 6f 64 65 29 26 26 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 5b 61 5d 29 63 6f 6e 73 6f 6c 65 5b 61 5d 28 22 5b 53 6e 61 70 2d 69 6e 73 5d 20 22 2b 0a 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 6a 6f 69 6e 28 22 2c 20 22 29 3a 62 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 75 74 70 75 74 54 6f 43 6f 6e 73 6f 6c 65 28 22 6c 6f 67 22 2c 5b 5d 2e 73 6c 69 63 65 2e 61 70 70 6c 79 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3f 74 68 69 73 2e 6f 75 74 70 75 74 54 6f 43 6f 6e 73 6f Data Ascii: (a,b,c){if((c\|\|this.settings.devMode)&&console&&console[a])console[a]("[Snap-ins] "+(Array.isArray(b)?b.join(", "):b))};d.prototype.log=function(){this.outputToConsole("log",[].slice.apply(arguments))};d.prototype.error=function(a,b){a?this.outputToConso
2023-10-12 21:30:19 UTC	293	IN	Data Raw: 20 45 78 69 74 69 6e 67 2e 22 29 7d 3b 0a 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 46 6f 72 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 4f 76 65 72 72 69 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5b 7b 6e 61 6d 65 3a 22 64 6f 63 75 6d 65 6e 74 22 2c 6f 62 6a 65 63 74 3a 64 6f 63 75 6d 65 6e 74 2c 66 75 6e 63 74 69 6f 6e 73 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 20 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 20 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 20 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 20 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 20 63 72 65 61 74 65 52 61 6e 67 65 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 20 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: Exiting.")};d.prototype.checkForNativeFunctionOverrides=function(){[{name:"document",object:document,functions:"addEventListener createAttribute createComment createDocumentFragment createElementNS createTextNode createRange getElementById getElementsBy
2023-10-12 21:30:19 UTC	299	IN	Data Raw: 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 65 6c 70 42 75 74 74 6f 6e 45 6e 61 62 6c 65 64 22 29 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 65 6c 70 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 22 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 29 3a 0a 28 61 2e 6f 6e 63 6c 69 63 6b 3d 74 68 69 73 2e 6f 6e 48 65 6c 70 42 75 74 74 6f 6e 43 6c 69 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 65 6c 70 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 22 29 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 65 6c 70 42 75 74 74 6f 6e 45 6e 61 62 6c Data Ascii: lick=function(){},a.classList.remove("helpButtonEnabled"),a.classList.add("helpButtonDisabled"),a.setAttribute("aria-disabled","true")):(a.onclick=this.onHelpButtonClick.bind(this),a.classList.remove("helpButtonDisabled"),a.classList.add("helpButtonEnabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.7	49777	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:20 UTC	305	OUT	GET /utag/gpl/afternic/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	65.8.164.48	443	192.168.2.7	49777	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:20 UTC	305	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 67079 Connection: close Last-Modified: Wed, 08 Mar 2023 11:30:41 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: csdzxLvBSaWP5JrkKkPlxrslxWAu.0xo Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 12 Oct 2023 21:29:02 GMT ETag: "825e3fe10a7f4efa6ea872fe1fd2a2a4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 61770d955dae13eda6e8f1b3baae4d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-C1 X-Amz-Cf-Id: u5sutGlwiKCJHIBFwSvP9n2NKx_npQexCcwebdvGN_VEfX0oaiIdtw== Age: 79 Cache-Control: max-age=300
2023-10-12 21:30:20 UTC	306	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 32 30 33 31 38 31 35 33 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 29 7b 76 61 72 20 75 74 61 67 3d 7b 69 64 3a 22 67 70 6c 2e 61 66 74 65 72 6e 69 63 22 2c 6f 3a 7b 7d 2c 73 65 6e 64 65 72 3a 7b Data Ascii: //tealium universal tag - utag.loader ut4.0.202203181533, Copyright 2022 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"gpl.afternic",o:{},sender:{
2023-10-12 21:30:20 UTC	321	IN	Data Raw: 6c 65 6e 67 74 68 29 2c 31 36 29 3b 74 72 79 7b 61 2b 3d 74 68 69 73 2e 70 61 64 28 28 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3f 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3a 30 29 2c 32 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6c 65 6e 67 74 68 2c 33 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 6c 65 6e 67 74 68 2c 34 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 6c 65 6e 67 74 68 2c 33 29 3b 61 2b 3d 74 68 69 73 2e 70 61 64 28 73 63 72 65 65 6e 2e 77 69 64 74 68 2b 73 63 72 65 65 6e 2e 68 65 69 67 68 74 2b 70 61 72 73 65 49 6e 74 28 28 73 Data Ascii: length),16);try{a+=this.pad((navigator.plugins.length?navigator.plugins.length:0),2);a+=this.pad(navigator.userAgent.length,3);a+=this.pad(document.URL.length,4);a+=this.pad(navigator.appVersion.length,3);a+=this.pad(screen.width+screen.height+parseInt((s
2023-10-12 21:30:20 UTC	337	IN	Data Raw: 63 6f 6e 73 65 6e 74 3a 20 22 2b 75 69 64 2b 22 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 65 6e 64 22 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 7d 65 6c 73 65 20 69 66 28 28 75 74 61 67 2e 67 64 70 72 2e 6f 6d 69 74 74 65 64 54 61 67 73 5b 75 69 64 5d 7c 7c 74 61 67 2e 74 63 61 74 3d 3d 30 29 26 26 74 61 67 2e 6c 6f 61 64 29 7b 75 74 61 67 2e 44 42 28 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 72 3a 20 4f 6d 69 74 74 65 64 20 54 61 67 3a 20 22 2b 75 69 64 2b 22 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 65 6e 64 22 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 0a 75 74 61 67 2e 44 42 28 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 72 3a 20 41 70 70 6c 79 69 6e 67 20 63 6f 6e 73 65 6e 74 3a 20 22 2b 75 69 64 2b 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 Data Ascii: consent: "+uid+" allowed to send");return false;}}else if((utag.gdpr.omittedTags[uid]\|\|tag.tcat==0)&&tag.load){utag.DB("Consent Manager: Omitted Tag: "+uid+" allowed to send");return false;}utag.DB("Consent Manager: Applying consent: "+uid+" not allowed
2023-10-12 21:30:20 UTC	353	IN	Data Raw: 63 65 73 2c 20 61 6e 64 20 75 73 65 72 20 65 78 70 65 72 69 65 6e 63 65 2e 22 7d 2c 22 65 6d 61 69 6c 22 3a 7b 22 6e 6f 74 65 73 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 22 7d 2c 22 64 69 73 70 6c 61 79 5f 61 64 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 6e 6f 74 65 73 22 3a 22 22 7d 2c 22 63 64 70 22 3a 7b 22 6e 6f 74 65 73 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 22 7d 7d 2c 22 69 73 44 65 66 61 75 6c 74 22 3a 22 74 72 75 65 22 2c 22 63 6f 6d 6d 6f 6e 5f 74 6f 6b 65 6e 73 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 4f 75 72 20 73 69 74 65 73 20 75 73 65 20 74 6f 6f 6c 73 2c 20 73 75 63 68 20 61 73 20 63 6f 6f 6b 69 65 73 2c 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 79 6f 75 20 75 73 65 20 6f 75 72 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 74 Data Ascii: ces, and user experience."},"email":{"notes":"","name":""},"display_ads":{"name":"","notes":""},"cdp":{"notes":"","name":""}},"isDefault":"true","common_tokens":{"message":"Our sites use tools, such as cookies, to understand how you use our services and t
2023-10-12 21:30:20 UTC	369	IN	Data Raw: 6f 76 72 64 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 66 6f 72 28 75 74 61 67 2e 5f 69 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 75 74 61 67 5f 63 66 67 5f 6f 76 72 64 29 29 75 74 61 67 2e 63 66 67 5b 75 74 61 67 2e 5f 69 5d 3d 75 74 61 67 5f 63 66 67 5f 6f 76 72 64 5b 75 74 61 67 2e 5f 69 5d 7d 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 50 49 4e 49 54 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 75 74 61 67 2e 44 42 28 22 50 72 65 2d 49 4e 49 54 22 29 3b 69 66 28 75 74 61 67 2e 63 66 67 2e 6e 6f 6c 6f 61 64 29 7b 72 65 74 75 72 6e 3b 7d 0a 74 72 79 7b 74 68 69 73 2e 47 45 54 28 29 3b 69 66 28 75 74 61 67 2e 68 61 6e 64 6c 65 72 2e 52 45 28 27 76 69 65 77 27 2c 75 74 61 67 2e 64 61 74 61 2c 22 62 6c 72 22 29 29 7b 75 74 61 67 2e 68 61 Data Ascii: ovrd!='undefined'){for(utag._i in utag.loader.GV(utag_cfg_ovrd))utag.cfg[utag._i]=utag_cfg_ovrd[utag._i]};utag.loader.PINIT=function(a,b,c){utag.DB("Pre-INIT");if(utag.cfg.noload){return;}try{this.GET();if(utag.handler.RE('view',utag.data,"blr")){utag.ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.7	49798	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:22 UTC	371	OUT	GET /utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	65.8.164.48	443	192.168.2.7	49798	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:22 UTC	372	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 23423 Connection: close Last-Modified: Wed, 08 Mar 2023 11:30:41 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: VNZIe5JhU5xqGcD9w.iKZEoPWiUDnS9z Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 12 Oct 2023 21:29:03 GMT ETag: "2a791a94037e5e338fd34d069f5a3af8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bc4ea6bb0c34991c678d2ee30fe9418e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-C1 X-Amz-Cf-Id: V6zxg1UUcuWrnJMFpygMYERuKqtd-EgA_sJVZ67udzBaoSTT7kksbQ== Age: 80 Cache-Control: max-age=1296000
2023-10-12 21:30:22 UTC	373	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 20 75 74 34 2e 30 2e 32 30 32 31 30 36 30 34 32 30 34 34 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 3d 22 22 7c 7c 22 67 61 22 3b 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 5d 3d 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 4f 62 6a 65 63 74 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 77 69 6e 64 6f 77 5b 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 41 6e 61 6c Data Ascii: //tealium universal tag - utag.7 ut4.0.202106042044, Copyright 2021 Tealium.com Inc. All Rights Reserved.window.GoogleAnalyticsObject=""\|\|"ga";window[window.GoogleAnalyticsObject]=window[window.GoogleAnalyticsObject]\|\|function(){(window[window.GoogleAnal
2023-10-12 21:30:22 UTC	388	IN	Data Raw: 6f 72 64 65 72 5f 69 64 2e 6c 65 6e 67 74 68 3e 30 29 7b 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 69 64 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 69 64 5b 30 5d 3b 7d 0a 75 2e 61 64 64 70 72 6f 64 75 63 74 28 22 70 72 6f 64 75 63 74 5f 70 75 72 63 68 61 73 65 22 2c 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 69 64 2e 6c 65 6e 67 74 68 2c 66 61 6c 73 65 29 3b 67 3d 7b 7d 3b 67 2e 69 64 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 69 64 3b 67 2e 61 66 66 69 6c 69 61 74 69 6f 6e 3d 28 75 2e 64 61 74 61 2e 61 66 66 69 6c 69 61 74 69 6f 6e 3f 75 2e 64 61 74 61 2e 61 66 66 69 6c 69 61 74 69 6f 6e 3a 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 73 74 6f 72 65 29 3b 67 2e 72 65 76 65 6e 75 65 3d 28 75 2e 64 61 74 61 2e 72 65 76 65 6e 75 65 3f 75 2e 64 61 74 61 2e 72 65 76 Data Ascii: order_id.length>0){u.data.order_id=u.data.order_id[0];}u.addproduct("product_purchase",u.data.product_id.length,false);g={};g.id=u.data.order_id;g.affiliation=(u.data.affiliation?u.data.affiliation:u.data.order_store);g.revenue=(u.data.revenue?u.data.rev

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	142.250.72.141	443	192.168.2.7	49703	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:52 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 12 Oct 2023 21:29:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-DQJu0aBGwAU3e1rLJwMyAg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-12 21:29:52 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-10-12 21:29:52 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.7	49801	65.8.164.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:23 UTC	395	OUT	GET /utag/tiqapp/utag.v.js?a=gpl/afternic/202203181533&cb=1697146221846 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	65.8.164.48	443	192.168.2.7	49801	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:23 UTC	396	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 12 Oct 2023 21:26:05 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eabaca8b591c36a72bf060174c30de0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-C1 X-Amz-Cf-Id: j_K3RpOhLoZoEnspcSz_7DqlMnAygRMc2n8hvhrcRBARNyHGbfBPNQ== Age: 259 Cache-Control: max-age=300
2023-10-12 21:30:23 UTC	397	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.7	49815	142.251.2.157	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:25 UTC	397	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&gjid=2039886485&_gid=1786680911.1697146223&_u=6GDAAUABAAAAACABIg~&z=1932754328 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.afternic.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	142.251.2.157	443	192.168.2.7	49815	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:25 UTC	397	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.afternic.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 12 Oct 2023 21:30:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:30:25 UTC	398	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.7	49820	142.250.188.228	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:26 UTC	398	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&_u=6GDAAUABAAAAACABIg~&z=564750678 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.7	49821	142.250.101.154	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:26 UTC	399	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&gjid=2039886485&_gid=1786680911.1697146223&_u=6GDAAUABAAAAACABIg~&z=1932754328 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	142.250.101.154	443	192.168.2.7	49821	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:26 UTC	400	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 12 Oct 2023 21:30:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:30:26 UTC	400	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	142.250.188.228	443	192.168.2.7	49820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:26 UTC	400	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 12 Oct 2023 21:30:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:30:26 UTC	401	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.7	49822	142.250.188.228	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:27 UTC	401	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&_u=6GDAAUABAAAAACABIg~&z=564750678 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	142.250.188.228	443	192.168.2.7	49822	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:27 UTC	401	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 12 Oct 2023 21:30:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:30:27 UTC	402	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.7	49706	103.224.182.240	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:53 UTC	4	OUT	GET / HTTP/1.1 Host: dev-lti.bncollge.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.7	49827	20.114.59.183	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:30:46 UTC	402	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YZXA7hly1D+4YkO&MD=Yxv6RaK4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-10-12 21:30:46 UTC	402	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: fe78653d-2f1b-4cdb-b391-15f6a704e607 MS-RequestId: a87721c9-38ab-4db5-b64e-aacc0254b026 MS-CV: girVRVldCUy+bhXi.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 12 Oct 2023 21:30:46 GMT Connection: close Content-Length: 25457
2023-10-12 21:30:46 UTC	403	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-10-12 21:30:46 UTC	418	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.7	49870	104.16.124.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:31:06 UTC	428	OUT	GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.afternic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	104.16.124.175	443	192.168.2.7	49870	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:31:07 UTC	428	IN	HTTP/1.1 200 OK Date: Thu, 12 Oct 2023 21:31:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"e48a-grpqi1n3WoZbzAzn4kJJEVbq1ZU" via: 1.1 fly.io fly-request-id: 01FMQQFSCPDKE49X4QS2M2K9CG CF-Cache-Status: HIT Age: 28431336 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 815272a8cd967bc7-LAX
2023-10-12 21:31:07 UTC	429	IN	Data Raw: 37 64 37 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3b 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 3d 5b 6e 28 31 37 30 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 28 5e 7c 40 29 5c 53 2b 5c 3a 5c 64 2b 2f 2c 6e 3d 2f 5e 5c 73 2a 61 74 20 2e 2a 28 5c 53 2b 5c 3a 5c 64 2b 7c 5c 28 6e 61 74 69 76 65 5c 29 29 2f 6d 2c 72 3d 2f 5e 28 65 76 61 6c 40 29 3f 28 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 29 3f 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 2c 6e 29 7b 69 66 28 22 66 75 6e Data Ascii: 7d78!function(){var t={816:function(t,e,n){var r,i,a;!function(o,s){"use strict";i=[n(170)],void 0===(a="function"==typeof(r=function(t){var e=/(^\|@)\S+\:\d+/,n=/^\sat .(\S+\:\d+\|$native$)/m,r=/^(eval@)?(\[native code\])?$/;function i(t,e,n){if("fun
2023-10-12 21:31:07 UTC	430	IN	Data Raw: 2c 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 29 72 65 74 75 72 6e 5b 74 5d 3b 76 61 72 20 65 3d 2f 28 2e 2b 3f 29 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 24 2f 2e 65 78 65 63 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 22 22 29 29 3b 72 65 74 75 72 6e 5b 65 5b 31 5d 2c 65 5b 32 5d 7c 7c 76 6f 69 64 20 30 2c 65 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 7d 2c 70 61 72 73 65 56 38 4f 72 49 45 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 61 28 65 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 2e 6d 61 74 63 68 28 Data Ascii: ,extractLocation:function(t){if(-1===t.indexOf(":"))return[t];var e=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[]/g,""));return[e[1],e[2]\|\|void 0,e[3]\|\|void 0]},parseV8OrIE:function(e){return i(a(e.stack.split("\n"),(function(t){return!!t.match(
2023-10-12 21:31:07 UTC	431	IN	Data Raw: 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 2f 69 2c 72 3d 65 2e 6d 65 73 73 61 67 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 5b 5d 2c 61 3d 32 2c 6f 3d 72 2e 6c 65 6e 67 74 68 3b 61 3c 6f 3b 61 2b 3d 32 29 7b 76 61 72 20 73 3d 6e 2e 65 78 65 63 28 72 5b 61 5d 29 3b 73 26 26 69 2e 70 75 73 68 28 6e 65 77 20 74 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 73 5b 32 5d 2c 73 5b 31 5d 2c 76 6f 69 64 20 30 2c 72 5b 61 5d 29 29 7d 72 65 74 75 72 6e 20 69 7d 2c 70 61 72 73 65 4f 70 65 72 61 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 28 3f 3a 3a 20 49 6e 20 66 Data Ascii: ar n=/Line (\d+).script (?:in )?(\S+)/i,r=e.message.split("\n"),i=[],a=2,o=r.length;a<o;a+=2){var s=n.exec(r[a]);s&&i.push(new t(void 0,void 0,s[2],s[1],void 0,r[a]))}return i},parseOpera10:function(e){for(var n=/Line (\d+).script (?:in )?(\S+)(?:: In f
2023-10-12 21:31:07 UTC	432	IN	Data Raw: 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 7d 2c 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3d 53 74 72 69 6e 67 28 74 29 7d 2c 67 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 72 67 73 7d 2c 73 65 74 41 72 67 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 73 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 22 29 3b 74 68 69 73 2e 61 72 67 73 3d 74 7d 2c 67 65 74 46 69 6c 65 4e 61 Data Ascii: his.functionName},setFunctionName:function(t){this.functionName=String(t)},getArgs:function(){return this.args},setArgs:function(t){if("[object Array]"!==Object.prototype.toString.call(t))throw new TypeError("Args must be an Array");this.args=t},getFileNa
2023-10-12 21:31:07 UTC	434	IN	Data Raw: 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 72 5d 7d 29 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e 28 38 31 36 29 2c 65 3d 6e 2e 6e 28 74 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 6e 3d 74 2e 65 72 72 6f 72 2c 72 3d 74 2e 66 69 6c 65 6e 61 6d 65 2c 69 3d 74 2e 6c 69 6e 65 6e 6f 2c 61 3d 74 2e 63 6f 6c 6e 6f 2c 6f 3d 5b 5d 3b 69 66 28 6e 29 74 72 79 7b 6f 3d 65 28 29 2e 70 61 72 Data Ascii: )&&Object.defineProperty(t,r,{enumerable:!0,get:e[r]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},function(){"use strict";var t=n(816),e=n.n(t);function r(t){var n=t.error,r=t.filename,i=t.lineno,a=t.colno,o=[];if(n)try{o=e().par
2023-10-12 21:31:07 UTC	435	IN	Data Raw: 65 74 75 72 6e 20 65 2e 72 65 6a 65 63 74 28 6e 29 7d 29 29 7d 29 29 7d 2c 61 3d 73 65 74 54 69 6d 65 6f 75 74 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e Data Ascii: eturn e.reject(n)}))}))},a=setTimeout;function o(t){return Boolean(t&&void 0!==t.length)}function s(){}function c(t){if(!(this instanceof c))throw new TypeError("Promises must be constructed via new");if("function"!=typeof t)throw new TypeError("not a fun
2023-10-12 21:31:07 UTC	436	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 65 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 66 28 65 2c 74 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 64 28 65 2c 74 29 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 64 28 65 2c 74 29 7d 7d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 73 29 3b 72 65 74 75 72 6e 20 75 Data Ascii: function v(t,e){var n=!1;try{t((function(t){n\|\|(n=!0,f(e,t))}),(function(t){n\|\|(n=!0,d(e,t))}))}catch(t){if(n)return;n=!0,d(e,t)}}c.prototype.catch=function(t){return this.then(null,t)},c.prototype.then=function(t,e){var n=new this.constructor(s);return u
2023-10-12 21:31:07 UTC	438	IN	Data Raw: 3a 68 2c 79 3d 5b 5d 2e 73 6c 69 63 65 2c 5f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2c 53 3d 5f 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3f 70 65 72 66 6f 72 6d 61 6e 63 65 3a 7b 7d 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 77 3d 30 3b 77 3c 32 35 36 3b 2b 2b 77 29 62 5b 77 5d 3d 28 77 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 76 61 72 20 54 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 70 75 73 68 28 Data Ascii: :h,y=[].slice,_="undefined"!=typeof window,S=_&&"undefined"!=typeof performance?performance:{};for(var b=[],w=0;w<256;++w)b[w]=(w+256).toString(16).substr(1);var T=new Uint8Array(16);function E(t){return function(t){for(var e=[],n=0;n<t.length;n++)e.push(
2023-10-12 21:31:07 UTC	439	IN	Data Raw: 61 79 28 66 29 3f 5b 5d 3a 7b 7d 29 2c 49 28 74 5b 75 5d 2c 5b 66 5d 2c 21 31 29 29 3a 74 5b 75 5d 3d 66 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 72 65 74 75 72 6e 20 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 74 Data Ascii: ay(f)?[]:{}),I(t[u],[f],!1)):t[u]=f}}return t}function j(){if("undefined"!=typeof document){var t=document.currentScript;return t\|\|function(){if("undefined"!=typeof document)for(var t=document.getElementsByTagName("script"),e=0,n=t.length;e<n;e++){var r=t
2023-10-12 21:31:07 UTC	440	IN	Data Raw: 63 65 28 65 2b 6c 29 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2e 73 6c 69 63 65 28 65 29 2c 69 3d 69 2e 73 6c 69 63 65 28 30 2c 65 29 7d 7d 65 6c 73 65 20 74 68 69 73 5b 70 5d 3d 69 2c 69 3d 22 22 3b 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 7c 7c 6f 26 26 66 5b 33 5d 26 26 73 5b 70 5d 7c 7c 22 22 2c 66 5b 33 5d 26 26 28 74 68 69 73 5b 70 5d 3d 74 68 69 73 5b 70 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 69 66 28 6f 26 26 22 2f 22 21 3d 3d 74 68 69 73 2e 70 61 74 68 2e 63 68 61 72 41 74 28 30 29 26 26 28 74 68 69 73 2e 70 61 74 68 3d 22 2f 22 2b 74 68 69 73 2e 70 61 74 68 29 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 3d 6f 2c 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 3d 72 7c 7c 73 2e 70 72 6f 74 6f 63 6f 6c 2c 74 68 69 73 2e 68 6f 73 74 6e 61 Data Ascii: ce(e+l)}else this[p]=i.slice(e),i=i.slice(0,e)}}else this[p]=i,i="";this[p]=this[p]\|\|o&&f[3]&&s[p]\|\|"",f[3]&&(this[p]=this[p].toLowerCase())}if(o&&"/"!==this.path.charAt(0)&&(this.path="/"+this.path),this.relative=o,this.protocol=r\|\|s.protocol,this.hostna
2023-10-12 21:31:07 UTC	442	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 2c 69 3d 72 2e 6e 61 6d 65 2c 61 3d 72 2e 64 75 72 61 74 69 6f 6e 2c 6f 3d 72 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 73 3d 69 3b 6f 26 26 28 73 2b 3d 22 3b 64 65 73 63 3d 22 2b 6f 29 2c 61 26 26 28 73 2b 3d 22 3b 64 75 72 3d 22 2b 61 29 2c 65 2e 70 75 73 68 28 73 29 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 28 74 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 2e 68 65 61 64 65 72 73 3d 7b 22 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 22 3a 6e 7d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 59 28 74 Data Ascii: nction(t){void 0===t&&(t=[]);for(var e=[],n=0;n<t.length;n++){var r=t[n],i=r.name,a=r.duration,o=r.description,s=i;o&&(s+=";desc="+o),a&&(s+=";dur="+a),e.push(s)}return e.join(", ")}(t.serverTiming);return n&&(e.headers={"server-timing":n}),e}function Y(t
2023-10-12 21:31:07 UTC	443	IN	Data Raw: 3d 3d 3d 47 26 26 55 28 29 29 7b 76 61 72 20 6f 3d 53 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 3b 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 28 61 3d 7b 72 65 73 70 6f 6e 73 65 3a 51 28 6f 5b 30 5d 29 7d 29 7d 74 2e 61 64 64 43 6f 6e 74 65 78 74 28 69 2c 61 2c 72 29 7d 76 61 72 20 72 74 3d 7b 73 65 72 76 69 63 65 3a 7b 6e 61 6d 65 3a 5b 31 30 32 34 2c 21 30 5d 2c 76 65 72 73 69 6f 6e 3a 21 30 2c 61 67 65 6e 74 3a 7b 76 65 72 73 69 6f 6e 3a 5b 31 30 32 34 2c 21 30 5d 7d 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 21 30 7d 2c 6c 61 62 65 6c 73 3a 7b 22 2a 22 3a 21 30 7d 7d 2c 69 74 3d 7b 22 2a 22 3a 21 30 2c 68 65 61 64 65 72 73 3a 7b 22 2a 22 3a 21 30 7d 7d 2c 61 74 3d 7b 75 73 65 72 3a 7b 69 64 3a 21 30 2c Data Ascii: ===G&&U()){var o=S.getEntriesByType("navigation");o&&o.length>0&&(a={response:Q(o[0])})}t.addContext(i,a,r)}var rt={service:{name:[1024,!0],version:!0,agent:{version:[1024,!0]},environment:!0},labels:{"":!0}},it={"":!0,headers:{"*":!0}},at={user:{id:!0,
2023-10-12 21:31:07 UTC	444	IN	Data Raw: 2e 5f 61 70 6d 53 65 72 76 65 72 3d 74 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 3d 65 2c 74 68 69 73 2e 5f 74 72 61 6e 73 61 63 74 69 6f 6e 53 65 72 76 69 63 65 3d 6e 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 45 72 72 6f 72 44 61 74 61 4d 6f 64 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 66 69 6c 65 6e 61 6d 65 2c 6e 3d 74 2e 6c 69 6e 65 6e 6f 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 26 26 76 6f 69 64 20 30 21 3d 3d 6e 7d 29 29 7d 28 72 28 74 29 29 2c 6e 3d 22 28 69 6e 6c 69 6e 65 20 73 63 72 69 70 74 Data Ascii: ._apmServer=t,this._configService=e,this._transactionService=n}var e=t.prototype;return e.createErrorDataModel=function(t){var e=function(t){return t.filter((function(t){var e=t.filename,n=t.lineno;return void 0!==e&&void 0!==n}))}(r(t)),n="(inline script
2023-10-12 21:31:07 UTC	446	IN	Data Raw: 73 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 6f 67 45 72 72 6f 72 45 76 65 6e 74 28 65 29 7d 29 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 6f 67 50 72 6f 6d 69 73 65 45 76 65 6e 74 28 65 29 7d 29 29 7d 2c 65 2e 6c 6f 67 50 72 6f 6d 69 73 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 22 55 6e 68 61 6e 64 6c 65 64 20 70 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 20 22 2c 72 3d 74 2e 72 65 61 73 6f 6e 3b 28 6e 75 6c 6c 3d 3d 72 Data Ascii: s;window.addEventListener("error",(function(e){return t.logErrorEvent(e)})),window.addEventListener("unhandledrejection",(function(e){return t.logPromiseEvent(e)}))},e.logPromiseEvent=function(t){var e,n="Unhandled promise rejection: ",r=t.reason;(null==r
2023-10-12 21:31:07 UTC	447	IN	Data Raw: 73 79 6d 62 6f 6c 5f 5f 22 2b 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 3b 72 26 26 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 3b 29 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 72 29 3b 21 72 26 26 74 5b 65 5d 26 26 28 72 3d 74 29 3b 76 61 72 20 69 2c 61 2c 6f 2c 73 2c 63 3d 79 74 28 65 29 3b 69 66 28 72 26 26 21 28 69 3d 72 5b 63 5d 29 29 7b 69 3d 72 5b 63 5d 3d 72 5b 65 5d 3b 76 61 72 20 75 3d 72 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 65 29 3b 69 66 28 21 28 73 3d 75 29 7c 7c 21 31 21 3d 3d 73 2e 77 72 69 74 61 62 6c 65 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 73 Data Ascii: symbol__"+t}function _t(t,e,n){for(var r=t;r&&!r.hasOwnProperty(e);)r=Object.getPrototypeOf(r);!r&&t[e]&&(r=t);var i,a,o,s,c=yt(e);if(r&&!(i=r[c])){i=r[c]=r[e];var u=r&&Object.getOwnPropertyDescriptor(r,e);if(!(s=u)\|\|!1!==s.writable&&("function"!=typeof s
2023-10-12 21:31:07 UTC	448	IN	Data Raw: 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 28 74 68 69 73 2e 5f 73 74 61 72 74 2c 74 68 69 73 2e 5f 65 6e 64 29 7d 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 78 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 78 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 2c 74 7d 29 28 74 2c 65 29 7d 76 61 72 20 6b 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 3b 69 66 28 28 69 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6e 2c 72 29 7c 7c 74 68 69 73 29 2e 70 61 72 65 6e 74 49 64 3d 69 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 49 64 Data Ascii: n=function(){return z(this._start,this._end)},t}();function xt(t,e){return(xt=Object.setPrototypeOf\|\|function(t,e){return t.__proto__=e,t})(t,e)}var kt=function(t){var e,n;function r(e,n,r){var i;if((i=t.call(this,e,n,r)\|\|this).parentId=i.options.parentId
2023-10-12 21:31:07 UTC	450	IN	Data Raw: 74 72 79 3a 74 7d 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 74 3e 65 7d 76 61 72 20 6a 74 3d 5b 22 66 65 74 63 68 53 74 61 72 74 22 2c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 22 2c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 22 2c 22 63 6f 6e 6e 65 63 74 53 74 61 72 74 22 2c 22 63 6f 6e 6e 65 63 74 45 6e 64 22 2c 22 72 65 71 75 65 73 74 53 74 61 72 74 22 2c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 2c 22 72 65 73 70 6f 6e 73 65 45 6e 64 22 2c 22 64 6f 6d 4c 6f 61 64 69 6e 67 22 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 22 2c 22 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 22 2c 22 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 Data Ascii: try:t}),s}function It(t,e){return null!=e&&t>e}var jt=["fetchStart","domainLookupStart","domainLookupEnd","connectStart","connectEnd","requestStart","responseStart","responseEnd","domLoading","domInteractive","domContentLoadedEventStart","domContentLoaded
2023-10-12 21:31:07 UTC	451	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4c 6f 61 64 53 70 61 6e 49 64 29 2c 74 2e 73 70 61 6e 73 2e 70 75 73 68 28 65 29 7d 29 29 2c 74 2e 61 64 64 4d 61 72 6b 73 28 52 74 28 72 29 29 7d 69 66 28 55 28 29 29 7b 76 61 72 20 69 3d 74 2e 5f 73 74 61 72 74 3b 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 61 5d 2c 73 3d 6f 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 63 3d 6f 2e 6e 61 6d 65 2c 75 3d 6f 2e 73 74 61 72 74 54 69 6d 65 2c 66 3d 6f 2e 72 65 73 70 6f 6e 73 65 45 6e 64 3b 2d 31 21 3d 3d 5a 2e 69 6e 64 65 78 4f 66 28 73 29 26 26 6e 75 6c 6c 21 3d 63 26 26 28 28 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 3d 3d 3d 73 7c Data Ascii: options.pageLoadSpanId),t.spans.push(e)})),t.addMarks(Rt(r))}if(U()){var i=t._start;(function(t,e,n,r){for(var i=[],a=0;a<t.length;a++){var o=t[a],s=o.initiatorType,c=o.name,u=o.startTime,f=o.responseEnd;-1!==Z.indexOf(s)&&null!=c&&(("xmlhttprequest"===s\|
2023-10-12 21:31:07 UTC	452	IN	Data Raw: 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 6a 74 5b 6e 5d 3b 72 2e 6e 74 5b 74 5d 3d 65 5b 69 5d 7d 29 29 2c 72 2e 61 3d 7b 66 62 3a 72 2e 6e 74 2e 72 73 2c 64 69 3a 72 2e 6e 74 2e 64 69 2c 64 63 3a 72 2e 6e 74 2e 64 63 7d 3b 76 61 72 20 69 3d 6e 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 2c 61 3d 6e 2e 6c 61 72 67 65 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3b 72 65 74 75 72 6e 20 69 26 26 28 72 2e 61 2e 66 70 3d 69 29 2c 61 26 26 28 72 2e 61 2e 6c 70 3d 61 29 2c 72 7d 76 61 72 20 48 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 3d 74 2c 74 68 69 73 2e 5f 6c 6f 67 67 69 6e 67 53 65 72 76 69 63 65 3d 65 2c 74 68 69 73 2e 71 Data Ascii: tion(t,n){var i=jt[n];r.nt[t]=e[i]})),r.a={fb:r.nt.rs,di:r.nt.di,dc:r.nt.dc};var i=n.firstContentfulPaint,a=n.largestContentfulPaint;return i&&(r.a.fp=i),a&&(r.a.lp=a),r}var Ht=function(){function t(t,e){this._configService=t,this._loggingService=e,this.q
2023-10-12 21:31:07 UTC	454	IN	Data Raw: 69 70 65 54 68 72 6f 75 67 68 28 6e 65 77 20 43 6f 6d 70 72 65 73 73 69 6f 6e 53 74 72 65 61 6d 28 65 29 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 73 70 6f 6e 73 65 28 73 29 2e 62 6c 6f 62 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 5b 22 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 22 5d 3d 65 2c 72 28 7b 70 61 79 6c 6f 61 64 3a 74 2c 68 65 61 64 65 72 73 3a 61 2c 62 65 66 6f 72 65 53 65 6e 64 3a 6f 7d 29 7d 29 29 7d 29 29 7d 28 72 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 6d 61 6b 65 48 74 74 70 52 65 71 75 65 73 74 28 22 50 4f 53 54 22 2c 74 2c 65 29 7d 29 29 2e 74 Data Ascii: ipeThrough(new CompressionStream(e));return new Response(s).blob().then((function(t){return a["Content-Encoding"]=e,r({payload:t,headers:a,beforeSend:o})}))}))}(r).catch((function(t){return r})).then((function(e){return n._makeHttpRequest("POST",t,e)})).t
2023-10-12 21:31:07 UTC	455	IN	Data Raw: 65 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 4c 6f 63 61 6c 43 6f 6e 66 69 67 28 29 3b 69 26 26 28 72 2b 3d 22 26 69 66 6e 6f 6e 65 6d 61 74 63 68 3d 22 2b 69 2e 65 74 61 67 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 28 22 61 70 6d 52 65 71 75 65 73 74 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 61 6b 65 48 74 74 70 52 65 71 75 65 73 74 28 22 47 45 54 22 2c 72 2c 7b 74 69 6d 65 6f 75 74 3a 35 65 33 2c 62 65 66 6f 72 65 53 65 6e 64 3a 61 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 74 61 74 75 73 2c 72 3d 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 69 66 28 33 30 34 3d 3d 3d 65 29 72 65 74 75 72 6e 20 69 Data Ascii: e);var i=this._configService.getLocalConfig();i&&(r+="&ifnonematch="+i.etag);var a=this._configService.get("apmRequest");return this._makeHttpRequest("GET",r,{timeout:5e3,beforeSend:a}).then((function(t){var e=t.status,r=t.responseText;if(304===e)return i
2023-10-12 21:31:07 UTC	456	IN	Data Raw: 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 74 2e 73 74 72 69 6e 67 69 66 79 28 7b 6d 65 74 72 69 63 73 65 74 3a 74 7d 29 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 65 2e 6e 64 6a 73 6f 6e 54 72 61 6e 73 61 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 65 3f 22 78 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 3b 72 65 74 75 72 6e 20 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 61 3d 22 22 2c 6f 3d 22 22 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 73 70 61 6e 73 26 26 28 61 3d 74 2e 73 70 61 6e 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 67 74 2e 73 74 72 69 6e 67 69 Data Ascii: on(t){return t.map((function(t){return gt.stringify({metricset:t})})).join("")},e.ndjsonTransactions=function(t,e){var n=this,r=e?"x":"transaction";return t.map((function(t){var i,a="",o="";return e\|\|(t.spans&&(a=t.spans.map((function(t){return gt.stringi
2023-10-12 21:31:07 UTC	458	IN	Data Raw: 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 61 5d 3b 6f 2e 74 72 61 6e 73 61 63 74 69 6f 6e 73 26 26 72 2e 70 75 73 68 28 6f 2e 74 72 61 6e 73 61 63 74 69 6f 6e 73 29 2c 6f 2e 65 72 72 6f 72 73 26 26 69 2e 70 75 73 68 28 6f 2e 65 72 72 6f 72 73 29 7d 69 66 28 30 21 3d 3d 72 2e 6c 65 6e 67 74 68 7c 7c 30 21 3d 3d 69 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2c 63 3d 28 28 65 3d 7b 7d 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 73 3d 72 2c 65 2e 65 72 72 6f 72 73 3d 69 2c 65 29 2c 75 3d 73 2e 61 70 70 6c 79 46 69 6c Data Ascii: ion(t){var e,n;if(0!==t.length){for(var r=[],i=[],a=0;a<t.length;a++){var o=t[a];o.transactions&&r.push(o.transactions),o.errors&&i.push(o.errors)}if(0!==r.length\|\|0!==i.length){var s=this._configService,c=((e={}).transactions=r,e.errors=i,e),u=s.applyFil
2023-10-12 21:31:07 UTC	459	IN	Data Raw: 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 74 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 55 74 2c 42 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 7b 73 65 72 76 69 63 65 4e 61 6d 65 3a 22 22 2c 73 65 72 76 69 63 65 56 65 72 73 69 6f 6e 3a 22 22 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 22 2c 73 65 Data Ascii: for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t}).apply(this,arguments)}var Ut,Bt=function(){function t(){this.config={serviceName:"",serviceVersion:"",environment:"",se
2023-10-12 21:31:07 UTC	460	IN	Data Raw: 36 37 31 32 0d 0a 65 2e 61 64 64 46 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 74 6f 20 6d 75 73 74 20 62 65 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 66 69 6c 74 65 72 73 2e 70 75 73 68 28 74 29 7d 2c 65 2e 61 70 70 6c 79 46 69 6c 74 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 66 69 6c 74 65 72 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 21 28 74 3d 74 68 69 73 2e 66 69 6c 74 65 72 73 5b 65 5d 28 74 29 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 74 7d 2c 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 Data Ascii: 6712e.addFilter=function(t){if("function"!=typeof t)throw new Error("Argument to must be function");this.filters.push(t)},e.applyFilters=function(t){for(var e=0;e<this.filters.length;e++)if(!(t=this.filters[e](t)))return;return t},e.get=function(t){retu
2023-10-12 21:31:07 UTC	461	IN	Data Raw: 74 28 74 2e 73 65 72 76 69 63 65 4e 61 6d 65 29 26 26 6e 2e 69 6e 76 61 6c 69 64 2e 70 75 73 68 28 7b 6b 65 79 3a 22 73 65 72 76 69 63 65 4e 61 6d 65 22 2c 76 61 6c 75 65 3a 74 2e 73 65 72 76 69 63 65 4e 61 6d 65 2c 61 6c 6c 6f 77 65 64 3a 22 61 2d 7a 2c 20 41 2d 5a 2c 20 30 2d 39 2c 20 5f 2c 20 2d 2c 20 3c 73 70 61 63 65 3e 22 7d 29 3b 76 61 72 20 72 3d 74 2e 74 72 61 6e 73 61 63 74 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 7c 7c 69 73 4e 61 4e 28 72 29 7c 7c 72 3c 30 7c 7c 72 3e 31 29 26 26 6e 2e 69 6e 76 61 6c 69 64 2e 70 75 73 68 28 7b 6b 65 79 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 22 2c 76 61 6c 75 65 3a 72 Data Ascii: t(t.serviceName)&&n.invalid.push({key:"serviceName",value:t.serviceName,allowed:"a-z, A-Z, 0-9, _, -, <space>"});var r=t.transactionSampleRate;return void 0!==r&&("number"!=typeof r\|\|isNaN(r)\|\|r<0\|\|r>1)&&n.invalid.push({key:"transactionSampleRate",value:r
2023-10-12 21:31:07 UTC	463	IN	Data Raw: 75 72 6e 20 6e 65 77 20 24 74 28 7b 70 72 65 66 69 78 3a 22 5b 45 6c 61 73 74 69 63 20 41 50 4d 5d 20 22 7d 29 7d 2c 55 74 2e 41 70 6d 53 65 72 76 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 53 65 72 76 69 63 65 28 5b 22 43 6f 6e 66 69 67 53 65 72 76 69 63 65 22 2c 22 4c 6f 67 67 69 6e 67 53 65 72 76 69 63 65 22 5d 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b 31 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 48 74 28 6e 2c 72 29 7d 2c 55 74 29 2c 4a 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 73 3d 7b 7d 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 69 6e 69 74 3d 66 Data Ascii: urn new $t({prefix:"[Elastic APM] "})},Ut.ApmServer=function(t){var e=t.getService(["ConfigService","LoggingService"]),n=e[0],r=e[1];return new Ht(n,r)},Ut),Jt=function(){function t(){this.instances={},this.initialized=!1}var e=t.prototype;return e.init=f
2023-10-12 21:31:07 UTC	464	IN	Data Raw: 65 3b 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3d 3d 3d 72 3f 34 3d 3d 3d 6e 2e 72 65 61 64 79 53 74 61 74 65 26 26 30 21 3d 3d 6e 2e 73 74 61 74 75 73 26 26 69 28 65 2c 22 73 75 63 63 65 73 73 22 29 3a 69 28 65 2c 22 6c 6f 61 64 22 3d 3d 3d 72 3f 22 73 75 63 63 65 73 73 22 3a 72 29 7d 29 29 7d 7d 28 61 29 2c 72 2e 61 70 70 6c 79 28 65 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 20 69 28 61 2c 22 65 72 72 6f 72 22 29 2c 74 7d 7d 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 65 2e 73 74 61 74 65 21 3d 3d 58 26 26 28 65 2e 73 74 61 74 65 3d 58 2c 65 2e 64 61 74 61 2e 73 74 61 74 75 73 3d 6e 2c 74 28 58 2c 65 29 29 7d 7d 66 6f 72 28 76 61 72 20 5a 74 3d 5b 22 63 6c 69 63 6b 22 5d 2c 47 74 3d 7b 7d 2c 57 74 3d 30 3b 57 74 Data Ascii: e;"readystatechange"===r?4===n.readyState&&0!==n.status&&i(e,"success"):i(e,"load"===r?"success":r)}))}}(a),r.apply(e,n)}catch(t){throw i(a,"error"),t}}}));function i(e,n){e.state!==X&&(e.state=X,e.data.status=n,t(X,e))}}for(var Zt=["click"],Gt={},Wt=0;Wt
2023-10-12 21:31:07 UTC	465	IN	Data Raw: 6e 2c 74 69 74 6c 65 3a 72 2c 75 72 6c 3a 69 7d 7d 3b 74 28 58 2c 61 29 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 7d 7d 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 59 74 2e 73 65 6e 64 28 22 68 69 73 74 6f 72 79 22 2c 5b 74 2c 65 5d 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 72 3d 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 74 68 69 Data Ascii: n,title:r,url:i}};t(X,a),e.apply(this,arguments)})}}((function(t,e){Yt.send("history",[t,e])})),function(t){if(window.EventTarget){var e=window.EventTarget.prototype,n=e.addEventListener,r=e.removeEventListener;e.addEventListener=function(t,e,r){var i=thi
2023-10-12 21:31:07 UTC	467	IN	Data Raw: 68 69 73 2e 5f 6c 6f 67 67 69 6e 53 65 72 76 69 63 65 3d 6e 2c 74 68 69 73 2e 5f 74 72 61 6e 73 61 63 74 69 6f 6e 53 65 72 76 69 63 65 3d 72 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 65 76 65 6e 74 73 2e 6f 62 73 65 72 76 65 28 22 74 72 61 6e 73 61 63 74 69 6f 6e 3a 65 6e 64 3a 61 66 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 63 72 65 61 74 65 54 72 61 6e 73 61 63 74 69 6f 6e 50 61 79 6c 6f 61 64 28 74 29 3b 6e 26 26 65 2e 5f 61 70 6d 53 65 72 76 65 72 2e 61 64 64 54 72 61 6e 73 61 Data Ascii: his._logginService=n,this._transactionService=r}var e=t.prototype;return e.init=function(t){var e=this;void 0===t&&(t={}),this._configService.events.observe("transaction:end:after",(function(t){var n=e.createTransactionPayload(t);n&&e._apmServer.addTransa
2023-10-12 21:31:07 UTC	468	IN	Data Raw: 76 61 72 20 6e 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2c 72 3d 74 68 69 73 2e 5f 74 72 61 6e 73 61 63 74 69 6f 6e 53 65 72 76 69 63 65 3b 69 66 28 22 73 63 68 65 64 75 6c 65 22 3d 3d 3d 74 26 26 65 2e 64 61 74 61 29 7b 76 61 72 20 69 3d 65 2e 64 61 74 61 2c 61 3d 6e 65 77 20 4a 28 69 2e 75 72 6c 29 2c 6f 3d 69 2e 6d 65 74 68 6f 64 2b 22 20 22 2b 28 61 2e 72 65 6c 61 74 69 76 65 3f 61 2e 70 61 74 68 3a 4f 28 61 2e 68 72 65 66 29 29 3b 72 2e 67 65 74 43 75 72 72 65 6e 74 54 72 61 6e 73 61 63 74 69 6f 6e 28 29 7c 7c 72 2e 73 74 61 72 74 54 72 61 6e 73 61 63 74 69 6f 6e 28 6f 2c 22 68 74 74 70 2d 72 65 71 75 65 73 74 22 2c 7b 6d 61 6e 61 67 65 64 3a 21 30 7d 29 3b 76 61 72 20 73 3d 72 2e 73 74 61 72 74 53 70 61 6e 28 6f 2c 22 65 78 74 65 Data Ascii: var n=this._configService,r=this._transactionService;if("schedule"===t&&e.data){var i=e.data,a=new J(i.url),o=i.method+" "+(a.relative?a.path:O(a.href));r.getCurrentTransaction()\|\|r.startTransaction(o,"http-request",{managed:!0});var s=r.startSpan(o,"exte
2023-10-12 21:31:07 UTC	469	IN	Data Raw: 73 3a 22 2b 65 7d 7d 28 74 29 3b 6e 26 26 78 28 65 2c 22 74 72 61 63 65 73 74 61 74 65 22 2c 6e 29 7d 2c 65 2e 65 78 74 72 61 63 74 44 74 48 65 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 28 22 64 69 73 74 72 69 62 75 74 65 64 54 72 61 63 69 6e 67 48 65 61 64 65 72 4e 61 6d 65 22 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 5e 28 5b 5c 64 61 2d 66 5d 7b 32 7d 29 2d 28 5b 5c 64 61 2d 66 5d 7b 33 32 7d 29 2d 28 5b 5c 64 61 2d 66 5d 7b 31 36 7d 29 2d 28 5b 5c 64 61 2d 66 5d 7b 32 7d 29 24 2f 2e 65 78 65 63 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 22 30 30 22 21 3d 3d 65 5b 34 5d 3b 72 65 74 75 72 6e 7b 74 Data Ascii: s:"+e}}(t);n&&x(e,"tracestate",n)},e.extractDtHeader=function(t){var e=this._configService.get("distributedTracingHeaderName");if(t)return function(t){var e=/^([\da-f]{2})-([\da-f]{32})-([\da-f]{16})-([\da-f]{2})$/.exec(t);if(e){var n="00"!==e[4];return{t
2023-10-12 21:31:07 UTC	471	IN	Data Raw: 72 3d 5b 5d 2c 69 3d 31 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6f 29 7b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 7b 76 61 72 20 73 3d 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 3d 73 2e 74 79 70 65 3d 3d 3d 61 2e 74 79 70 65 26 26 73 2e 73 75 62 74 79 70 65 3d 3d 3d 61 2e 73 75 62 74 79 70 65 26 26 73 2e 61 63 74 69 6f 6e 3d 3d 3d 61 2e 61 63 74 69 6f 6e 26 26 73 2e 6e 61 6d 65 3d 3d 3d 61 2e 6e 61 6d 65 26 26 61 2e 64 75 72 61 74 69 6f 6e 28 29 2f 65 3c 6e 26 26 28 61 2e 5f 73 74 61 72 74 2d 73 2e 5f 65 6e 64 29 2f 65 3c 6e 2c 75 3d 74 2e 6c 65 6e 67 74 68 3d 3d 3d 6f 2b 31 3b 63 26 26 28 69 2b 2b 2c 73 2e 5f 65 6e 64 3d 61 2e 5f 65 6e 64 29 2c 69 3e 31 Data Ascii: r=[],i=1;return t.forEach((function(a,o){if(0===r.length)r.push(a);else{var s=r[r.length-1],c=s.type===a.type&&s.subtype===a.subtype&&s.action===a.action&&s.name===a.name&&a.duration()/e<n&&(a._start-s._end)/e<n,u=t.length===o+1;c&&(i++,s._end=a._end),i>1
2023-10-12 21:31:07 UTC	472	IN	Data Raw: 70 65 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 6f 65 28 65 2c 6e 29 3b 76 61 72 20 69 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 69 2e 61 64 64 4d 61 72 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6d 61 72 6b 73 3d 52 28 74 68 69 73 2e 6d 61 72 6b 73 7c 7c 7b 7d 2c 74 29 7d 2c 69 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 50 28 74 29 2c 6e 3d 4d 28 29 2d 74 68 69 73 2e 5f 73 74 61 72 74 2c 72 3d 7b 7d 3b 72 5b 65 5d 3d 6e 2c 74 68 69 73 2e 61 64 64 4d 61 72 6b 73 28 7b 63 75 73 74 6f 6d 3a 72 7d 29 7d 2c 69 2e 63 61 6e 52 65 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 75 73 65 54 68 72 65 Data Ascii: pe),e.prototype.constructor=e,oe(e,n);var i=r.prototype;return i.addMarks=function(t){this.marks=R(this.marks\|\|{},t)},i.mark=function(t){var e=P(t),n=M()-this._start,r={};r[e]=n,this.addMarks({custom:r})},i.canReuse=function(){var t=this.options.reuseThre
2023-10-12 21:31:07 UTC	473	IN	Data Raw: 3c 72 65 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 75 3d 72 65 5b 63 5d 2c 66 3d 7a 28 65 5b 75 5b 30 5d 5d 2c 65 5b 75 5b 31 5d 5d 29 3b 30 21 3d 3d 66 26 26 6e 75 6c 6c 21 3d 66 26 26 6e 2e 70 75 73 68 28 61 65 28 73 2c 7b 64 65 74 61 69 6c 73 3a 7b 74 79 70 65 3a 75 5b 32 5d 7d 2c 64 75 72 61 74 69 6f 6e 3a 66 7d 29 29 7d 65 6c 73 65 7b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 61 6e 73 2c 6e 3d 74 2e 5f 73 74 61 72 74 2c 72 3d 74 2e 5f 65 6e 64 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 2e 64 75 72 61 74 69 6f 6e 28 29 3b 65 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 Data Ascii: <re.length;c++){var u=re[c],f=z(e[u[0]],e[u[1]]);0!==f&&null!=f&&n.push(ae(s,{details:{type:u[2]},duration:f}))}else{var d=function(t){var e={},n=function(t){var e=t.spans,n=t._start,r=t._end;if(0===e.length)return t.duration();e.sort((function(t,e){retur
2023-10-12 21:31:07 UTC	475	IN	Data Raw: 72 61 74 69 6f 6e 3a 30 2c 6d 61 78 3a 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 69 73 48 61 72 64 4e 61 76 69 67 61 74 69 6f 6e 2c 72 3d 65 2e 74 72 53 74 61 72 74 2c 69 3d 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6c 6f 6e 67 74 61 73 6b 22 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 74 61 72 74 54 69 6d 65 3e 3d 72 7d 29 29 2c 61 3d 7b 73 70 61 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2c 61 3d 69 2e 6e 61 6d 65 2c 6f 3d 69 2e 73 74 61 72 74 54 69 6d 65 2c 73 3d 69 2e 64 75 72 61 74 69 6f 6e 2c 63 3d 69 Data Ascii: ration:0,max:0}};function ue(t,e){var n=e.isHardNavigation,r=e.trStart,i=t.getEntriesByType("longtask").filter((function(t){return t.startTime>=r})),a={spans:function(t,e){for(var n=[],r=0;r<t.length;r++){var i=t[r],a=i.name,o=i.startTime,s=i.duration,c=i
2023-10-12 21:31:07 UTC	476	IN	Data Raw: 74 62 74 2e 64 75 72 61 74 69 6f 6e 2b 3d 69 29 7d 7d 29 29 7d 28 69 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 74 2e 68 61 64 52 65 63 65 6e 74 49 6e 70 75 74 26 26 74 2e 76 61 6c 75 65 26 26 28 63 65 2e 63 6c 73 2b 3d 74 2e 76 61 6c 75 65 29 7d 29 29 7d 28 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6c 61 79 6f 75 74 2d 73 68 69 66 74 22 29 29 2c 61 7d 76 61 72 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 70 6f 3d 7b 6f 62 73 65 72 76 65 3a 41 2c 64 69 73 63 6f 6e 6e 65 63 74 3a 41 7d 2c 77 69 6e 64 6f 77 2e 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 74 68 69 73 2e 70 6f 3d 6e 65 77 20 50 Data Ascii: tbt.duration+=i)}}))}(i),function(t){t.forEach((function(t){!t.hadRecentInput&&t.value&&(ce.cls+=t.value)}))}(t.getEntriesByType("layout-shift")),a}var fe=function(){function t(t){this.po={observe:A,disconnect:A},window.PerformanceObserver&&(this.po=new P
2023-10-12 21:31:07 UTC	478	IN	Data Raw: 72 20 72 3d 74 68 69 73 2e 67 65 74 43 75 72 72 65 6e 74 54 72 61 6e 73 61 63 74 69 6f 6e 28 29 2c 69 3d 21 31 3b 69 66 28 72 29 69 66 28 72 2e 63 61 6e 52 65 75 73 65 28 29 26 26 6e 2e 63 61 6e 52 65 75 73 65 29 7b 76 61 72 20 61 3d 72 2e 74 79 70 65 2c 6f 3d 57 2e 69 6e 64 65 78 4f 66 28 72 2e 74 79 70 65 29 2c 73 3d 57 2e 69 6e 64 65 78 4f 66 28 65 29 3b 6f 3e 3d 30 26 26 73 3c 6f 26 26 28 61 3d 65 29 2c 72 2e 72 65 64 65 66 69 6e 65 28 74 2c 61 2c 6e 29 2c 69 3d 21 30 7d 65 6c 73 65 20 72 2e 65 6e 64 28 29 2c 72 3d 74 68 69 73 2e 63 72 65 61 74 65 43 75 72 72 65 6e 74 54 72 61 6e 73 61 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 3b 65 6c 73 65 20 72 3d 74 68 69 73 2e 63 72 65 61 74 65 43 75 72 72 65 6e 74 54 72 61 6e 73 61 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: r r=this.getCurrentTransaction(),i=!1;if(r)if(r.canReuse()&&n.canReuse){var a=r.type,o=W.indexOf(r.type),s=W.indexOf(e);o>=0&&s<o&&(a=e),r.redefine(t,a,n),i=!0}else r.end(),r=this.createCurrentTransaction(t,e,n);else r=this.createCurrentTransaction(t,e,n)
2023-10-12 21:31:07 UTC	479	IN	Data Raw: 3d 63 65 2e 66 69 64 2c 63 3d 63 65 2e 74 62 74 2c 75 3d 63 65 2e 6c 6f 6e 67 74 61 73 6b 3b 63 2e 64 75 72 61 74 69 6f 6e 3e 30 26 26 74 2e 73 70 61 6e 73 2e 70 75 73 68 28 28 64 3d 28 66 3d 63 29 2e 73 74 61 72 74 2c 70 3d 66 2e 64 75 72 61 74 69 6f 6e 2c 28 6c 3d 6e 65 77 20 6b 74 28 22 54 6f 74 61 6c 20 42 6c 6f 63 6b 69 6e 67 20 54 69 6d 65 22 2c 22 6c 6f 6e 67 74 61 73 6b 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 64 7d 29 29 2e 65 6e 64 28 64 2b 70 29 2c 6c 29 29 2c 74 2e 65 78 70 65 72 69 65 6e 63 65 3d 7b 7d 2c 42 28 22 6c 6f 6e 67 74 61 73 6b 22 29 26 26 28 74 2e 65 78 70 65 72 69 65 6e 63 65 2e 74 62 74 3d 63 2e 64 75 72 61 74 69 6f 6e 29 2c 42 28 22 6c 61 79 6f 75 74 2d 73 68 69 66 74 22 29 26 26 28 74 2e 65 78 70 65 72 69 65 6e 63 65 2e 63 6c 73 Data Ascii: =ce.fid,c=ce.tbt,u=ce.longtask;c.duration>0&&t.spans.push((d=(f=c).start,p=f.duration,(l=new kt("Total Blocking Time","longtask",{startTime:d})).end(d+p),l)),t.experience={},B("longtask")&&(t.experience.tbt=c.duration),B("layout-shift")&&(t.experience.cls
2023-10-12 21:31:07 UTC	480	IN	Data Raw: 75 65 6e 63 65 3a 65 2e 73 65 71 75 65 6e 63 65 3f 65 2e 73 65 71 75 65 6e 63 65 2b 31 3a 31 7d 3b 76 61 72 20 6e 3d 7b 73 65 73 73 69 6f 6e 3a 7b 69 64 3a 74 2e 73 65 73 73 69 6f 6e 2e 69 64 2c 73 65 71 75 65 6e 63 65 3a 74 2e 73 65 73 73 69 6f 6e 2e 73 65 71 75 65 6e 63 65 2c 74 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 7d 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 73 65 74 43 6f 6e 66 69 67 28 6e 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 73 65 74 4c 6f 63 61 6c 43 6f 6e 66 69 67 28 6e 2c 21 30 29 7d 7d 2c 65 2e 61 64 6a 75 73 74 54 72 61 6e 73 61 63 74 69 6f 6e 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 61 6e 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 5b 30 Data Ascii: uence:e.sequence?e.sequence+1:1};var n={session:{id:t.session.id,sequence:t.session.sequence,timestamp:Date.now()}};this._config.setConfig(n),this._config.setLocalConfig(n,!0)}},e.adjustTransactionTime=function(t){var e=t.spans,n=function(t){for(var e=t[0
2023-10-12 21:31:07 UTC	482	IN	Data Raw: 67 53 65 72 76 69 63 65 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 53 65 72 76 69 63 65 22 5d 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b 31 5d 2c 69 3d 65 5b 32 5d 2c 61 3d 65 5b 33 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 6e 65 28 6e 2c 72 2c 69 2c 61 29 7d 2c 56 74 2e 45 72 72 6f 72 4c 6f 67 67 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 53 65 72 76 69 63 65 28 5b 22 41 70 6d 53 65 72 76 65 72 22 2c 22 43 6f 6e 66 69 67 53 65 72 76 69 63 65 22 2c 22 54 72 61 6e 73 61 63 74 69 6f 6e 53 65 72 76 69 63 65 22 5d 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b 31 5d 2c 69 3d 65 5b 32 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 76 74 28 6e 2c 72 2c 69 29 7d 2c 6e 65 77 20 4a 74 7d 76 61 72 20 6c 65 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 65 Data Ascii: gService","TransactionService"]),n=e[0],r=e[1],i=e[2],a=e[3];return new ne(n,r,i,a)},Vt.ErrorLogging=function(t){var e=t.getService(["ApmServer","ConfigService","TransactionService"]),n=e[0],r=e[1],i=e[2];return new vt(n,r,i)},new Jt}var le=!1;function ve
2023-10-12 21:31:07 UTC	483	IN	Data Raw: 28 72 5b 74 5d 3d 21 30 29 7d 29 29 2c 72 29 3a 72 7d 28 72 2e 67 65 74 28 22 69 6e 73 74 72 75 6d 65 6e 74 22 29 2c 72 2e 67 65 74 28 22 64 69 73 61 62 6c 65 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 73 22 29 29 3b 69 66 28 74 68 69 73 2e 73 65 72 76 69 63 65 46 61 63 74 6f 72 79 2e 67 65 74 53 65 72 76 69 63 65 28 22 50 65 72 66 6f 72 6d 61 6e 63 65 4d 6f 6e 69 74 6f 72 69 6e 67 22 29 2e 69 6e 69 74 28 6f 29 2c 6f 2e 65 72 72 6f 72 29 74 68 69 73 2e 73 65 72 76 69 63 65 46 61 63 74 6f 72 79 2e 67 65 74 53 65 72 76 69 63 65 28 22 45 72 72 6f 72 4c 6f 67 67 69 6e 67 22 29 2e 72 65 67 69 73 74 65 72 4c 69 73 74 65 6e 65 72 73 28 29 3b 69 66 28 72 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 22 29 29 7b 76 61 72 20 73 3d 72 2e 67 65 74 4c 6f 63 61 6c 43 6f 6e Data Ascii: (r[t]=!0)})),r):r}(r.get("instrument"),r.get("disableInstrumentations"));if(this.serviceFactory.getService("PerformanceMonitoring").init(o),o.error)this.serviceFactory.getService("ErrorLogging").registerListeners();if(r.get("session")){var s=r.getLocalCon
2023-10-12 21:31:07 UTC	486	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.7	49954	44.234.208.169	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:31:22 UTC	486	OUT	OPTIONS /intake/v2/rum/events HTTP/1.1 Host: 55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type Origin: https://sso.afternic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-12 21:31:22 UTC	486	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type, Content-Encoding, Accept Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://sso.afternic.com Access-Control-Expose-Headers: Etag Access-Control-Max-Age: 3600 Content-Length: 0 Date: Thu, 12 Oct 2023 21:31:22 GMT Vary: Origin X-Cloud-Request-Id: D22vOBJyQt-rL0Z1c1TrRA X-Content-Type-Options: nosniff X-Found-Handling-Cluster: 55c74eee6fcf46b1a0517a610f8d289a X-Found-Handling-Instance: instance-0000000029 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.7	49955	44.234.208.169	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:31:23 UTC	487	OUT	POST /intake/v2/rum/events HTTP/1.1 Host: 55c74eee6fcf46b1a0517a610f8d289a.apm.vpce.gdw55e.elastic-cloud.com Connection: keep-alive Content-Length: 5931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-ndjson Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sso.afternic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-12 21:31:23 UTC	488	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5d eb 6f e3 38 92 ff 7e 7f 45 10 a0 8d 3b a0 65 f3 fd 98 83 31 bb 33 dd b3 37 b8 d9 99 b9 eb 9e 2f 87 05 0c 8a 8f c4 13 c7 f2 49 72 ba 33 83 fe df af 28 c9 89 e5 c8 ee d8 51 da f1 5e a3 1f 96 54 14 55 24 7f 55 2c b2 8a e4 9f e7 d7 be 34 ce 94 e6 fc 9b 3f cf 0b 9f df 4c ad 8f 97 73 73 0d bf e7 66 59 5e 26 cb 69 62 67 53 3f 2f 93 45 9e b9 f3 d7 e7 37 3e 2f a6 d9 1c e8 37 18 51 0d 4f cc 05 90 d7 de cb 97 d7 c9 ef 45 2b 29 1f ea 21 3e ff f4 fa 7c 66 e6 17 4b 78 61 2d f9 ef e6 c6 14 36 9f 2e ca 98 c0 cf 6f a6 79 36 bf ae b2 3c 8f df 5c da 32 66 f2 e9 d3 a7 7f f9 f3 bc cc cd bc 30 f5 13 c8 62 ea 20 91 48 8d 73 9c 63 ee 90 95 86 19 f8 32 24 b3 7e 52 51 09 26 9a 38 49 a8 0c 82 07 84 03 e3 28 a5 28 98 d4 6a e6 a8 87 d4 0d 23 a3 59 Data Ascii: ]o8~E;e137/Ir3(Q^TU$U,4?LssfY^&ibgS?/E7>/7QOE+)!>\|fKxa-6.oy6<\2f0b Hsc2$~RQ&8I((j#Y
2023-10-12 21:31:23 UTC	493	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: https://sso.afternic.com Content-Length: 0 Date: Thu, 12 Oct 2023 21:31:23 GMT X-Cloud-Request-Id: 7kzGkV5STx2PYUmqjxjw2A X-Content-Type-Options: nosniff X-Found-Handling-Cluster: 55c74eee6fcf46b1a0517a610f8d289a X-Found-Handling-Instance: instance-0000000029 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	103.224.182.240	443	192.168.2.7	49706	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:53 UTC	5	IN	HTTP/1.1 302 Found date: Thu, 12 Oct 2023 21:29:53 GMT server: Apache set-cookie: __tad=1697146193.4619006; expires=Sun, 09-Oct-2033 21:29:53 GMT; Max-Age=315360000 location: http://ww38.dev-lti.bncollge.com/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close
2023-10-12 21:29:53 UTC	5	IN	Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.7	49713	142.250.68.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:55 UTC	5	OUT	GET /adsense/domains/caf.js?abp=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	142.250.68.100	443	192.168.2.7	49713	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:55 UTC	6	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 150819 Date: Thu, 12 Oct 2023 21:29:55 GMT Expires: Thu, 12 Oct 2023 21:29:55 GMT Cache-Control: private, max-age=3600 ETag: "3867612020393326034" X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-10-12 21:29:55 UTC	6	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 33 32 37 31 30 32 32 31 37 34 33 31 37 36 32 32 33 31 30 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 61 68 3a 74 72 75 65 2c 75 61 74 6d 3a 35 30 30 2c 65 63 66 63 32 3a 74 72 75 65 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3271022174317622310",packages:"domains",module:"ads",version:"1",m:{ah:true,uatm:500,ecfc2:true
2023-10-12 21:29:55 UTC	7	IN	Data Raw: 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 Data Ascii: rtyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYX
2023-10-12 21:29:55 UTC	8	IN	Data Raw: 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 64 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 68 61 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 Data Ascii: :g})}if(a)return a;c.prototype.toString=function(){return this.Rd};var d="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",e=0;return b});ha("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Cla
2023-10-12 21:29:55 UTC	9	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 72 61 3d 6e 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6d 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 72 61 29 72 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 Data Ascii: ion(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var ra=na;function sa(a,b){a.prototype=ma(b.prototype);a.prototype.constructor=a;if(ra)ra(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProp
2023-10-12 21:29:55 UTC	10	IN	Data Raw: 63 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 48 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 4d 63 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 51 66 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 47 66 28 67 29 3a Data Ascii: c)}};b.prototype.Hf=function(g){if(g===this)this.Mc(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Qf(g);else{a:switch(typeof g){case "object":var h=null!=g;break a;case "function":h=!0;break a;default:h=!1}h?this.Gf(g):
2023-10-12 21:29:55 UTC	12	IN	Data Raw: 74 68 3b 2b 2b 67 29 66 2e 6a 64 28 74 68 69 73 2e 78 61 5b 67 5d 29 3b 74 68 69 73 2e 78 61 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 51 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 5a 62 28 29 3b 67 2e 62 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 66 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 5a 62 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e Data Ascii: th;++g)f.jd(this.xa[g]);this.xa=null}};var f=new c;b.prototype.Qf=function(g){var h=this.Zb();g.bb(h.resolve,h.reject)};b.prototype.Rf=function(g,h){var k=this.Zb();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){fun
2023-10-12 21:29:55 UTC	13	IN	Data Raw: 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 68 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 75 61 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f Data Ascii: otype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ha("Object.assign",function(a){return a\|\|ua});function va(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)thro
2023-10-12 21:29:55 UTC	14	IN	Data Raw: 7d 3b 72 65 74 75 72 6e 20 65 7d 68 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 68 61 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 Data Ascii: };return e}ha("Array.prototype.keys",function(a){return a?a:function(){return wa(this,function(b){return b})}});ha("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)Object.prototype.hasOwnProperty.call(b,d)&&c.push(b[d]);return c}})
2023-10-12 21:29:55 UTC	15	IN	Data Raw: 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 57 66 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 42 67 3d 66 75 6e 63 74 69 6f 6e 28 64 2c Data Ascii: "array"==b\|\|"object"==b&&"number"==typeof a.length}function za(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function Aa(a,b){function c(){}c.prototype=b.prototype;a.Wf=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Bg=function(d,
2023-10-12 21:29:55 UTC	17	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 31 21 3d 62 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 62 2c 30 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 57 61 3d 41 72 72 61 79 2e 70 72 6f 74 Data Ascii: .prototype.indexOf?function(a,b){return Array.prototype.indexOf.call(a,b,void 0)}:function(a,b){if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,0);for(var c=0;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1},Wa=Array.prot
2023-10-12 21:29:55 UTC	18	IN	Data Raw: 3d 66 62 3f 61 2e 4a 64 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 43 6f 6e 73 74 22 7d 76 61 72 20 66 62 3d 7b 7d 2c 65 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 29 7b 74 68 69 73 2e 4b 63 3d 61 7d 68 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4b 63 2b 22 22 7d 3b 68 62 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 3d 21 30 3b 68 62 2e 70 72 6f 74 6f 74 79 70 65 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4b 63 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 2c 62 29 7b 61 3d 6a 62 2e 65 78 65 63 28 6b 62 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 76 61 72 20 63 3d 61 5b 33 5d 7c 7c 22 22 3b 72 Data Ascii: =fb?a.Jd:"type_error:Const"}var fb={},eb={};function hb(a){this.Kc=a}hb.prototype.toString=function(){return this.Kc+""};hb.prototype.wa=!0;hb.prototype.qa=function(){return this.Kc.toString()};function ib(a,b){a=jb.exec(kb(a).toString());var c=a[3]\|\|"";r
2023-10-12 21:29:55 UTC	19	IN	Data Raw: 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 78 62 3f 61 2e 4a 63 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 55 72 6c 22 7d 76 61 72 20 7a 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 62 28 61 29 7b 74 68 69 73 2e 49 63 3d 61 3b 74 68 69 73 2e 77 61 3d 21 30 7d 41 62 2e 70 72 6f 74 6f 74 79 70 65 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 63 7d 3b 41 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 63 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 62 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 62 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 62 3f 61 2e 49 63 Data Ascii: .constructor===xb?a.Jc:"type_error:SafeUrl"}var zb={};function Ab(a){this.Ic=a;this.wa=!0}Ab.prototype.qa=function(){return this.Ic};Ab.prototype.toString=function(){return this.Ic.toString()};function Bb(a){return a instanceof Ab&&a.constructor===Ab?a.Ic
2023-10-12 21:29:55 UTC	20	IN	Data Raw: 20 55 62 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 62 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 54 62 3f 61 2e 47 63 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 62 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 62 7c 7c 28 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 2e 77 61 3f 61 2e 71 61 28 29 3a 53 74 72 69 6e 67 28 61 29 2c 77 62 2e 74 65 73 74 28 61 29 26 26 28 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 29 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 71 62 2c 22 26 61 6d 70 3b 22 29 29 2c 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3c 22 29 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 72 62 2c 22 26 6c 74 3b Data Ascii: Ub(a){return a instanceof Tb&&a.constructor===Tb?a.Gc:"type_error:SafeHtml"}function Vb(a){a instanceof Tb\|\|(a="object"==typeof a&&a.wa?a.qa():String(a),wb.test(a)&&(-1!=a.indexOf("&")&&(a=a.replace(qb,"&")),-1!=a.indexOf("<")&&(a=a.replace(rb,"<
2023-10-12 21:29:55 UTC	21	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 3b 62 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 2e 66 69 72 73 74 43 68 69 6c 64 3b 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 55 62 28 58 62 29 3b 72 65 74 75 72 6e 21 62 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 5a 62 28 61 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 24 62 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: document.createElement("div");b.appendChild(document.createElement("div"));a.appendChild(b);b=a.firstChild.firstChild;a.innerHTML=Ub(Xb);return!b.parentElement});function Zb(a){return decodeURIComponent(a.replace(/\+/g," "))};function $b(a){return functio
2023-10-12 21:29:55 UTC	22	IN	Data Raw: 6d 65 7c 43 72 69 4f 53 2f 69 2e 74 65 73 74 28 6b 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 63 28 29 7b 76 61 72 20 61 3d 6b 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 73 65 72 69 65 73 36 30 22 29 7c 7c 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 73 65 72 69 65 73 20 36 30 22 29 7d 3b 76 61 72 20 75 63 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 76 63 28 29 7b 75 63 7c 7c 28 75 63 3d 77 63 28 29 29 3b 72 65 74 75 72 6e 20 75 63 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 63 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 3d 6a 63 28 22 61 68 22 2c 69 63 28 29 29 3f 66 3a 67 3b 69 66 28 22 22 21 3d 3d 28 65 63 28 22 63 64 68 22 2c 69 63 28 29 29 7c 7c 22 22 29 29 Data Ascii: me\|CriOS/i.test(kc)}function tc(){var a=kc.toLowerCase();return-1!=a.indexOf("series60")\|\|-1!=a.indexOf("series 60")};var uc=null;function vc(){uc\|\|(uc=wc());return uc}function wc(){function a(c,d,e,f,g){f=jc("ah",ic())?f:g;if(""!==(ec("cdh",ic())\|\|""))
2023-10-12 21:29:55 UTC	23	IN	Data Raw: 29 7b 76 61 72 20 67 3d 61 2e 4e 5b 65 5d 5b 31 5d 3b 66 3d 67 2e 6c 65 6e 67 74 68 3e 66 3f 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 66 29 3a 67 3b 62 2b 3d 28 63 3f 22 26 22 3a 22 3f 22 29 2b 61 2e 4e 5b 65 5d 5b 30 5d 2b 22 3d 22 2b 66 3b 64 2d 3d 66 2e 6c 65 6e 67 74 68 3b 66 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 2f 28 61 2e 4e 2e 6c 65 6e 67 74 68 2d 65 2d 31 29 29 3b 63 3d 21 30 7d 65 6c 73 65 20 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 4e 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 2e 4e 5b 64 5d 5b 30 5d 2e 6c 65 6e 67 74 68 2b 33 2b 62 2e 6c 65 6e 67 74 68 3c 3d 61 2e 78 62 26 26 28 62 2b 3d 28 63 3f 22 26 22 3a 22 3f 22 29 2b 0a 61 2e 4e 5b 64 5d 2e 6a 6f 69 6e 28 22 3d 22 29 2c 63 3d 21 30 29 3b 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 78 Data Ascii: ){var g=a.N[e][1];f=g.length>f?g.substring(0,f):g;b+=(c?"&":"?")+a.N[e][0]+"="+f;d-=f.length;f=Math.floor(d/(a.N.length-e-1));c=!0}else for(d=0;d<a.N.length;d++)a.N[d][0].length+3+b.length<=a.xb&&(b+=(c?"&":"?")+a.N[d].join("="),c=!0);b=b.substring(0,a.x
2023-10-12 21:29:55 UTC	25	IN	Data Raw: 62 2c 63 29 7b 76 61 72 20 64 3d 44 63 28 61 29 3b 41 28 64 2c 22 70 62 74 22 2c 22 74 70 22 29 3b 41 28 64 2c 22 65 72 72 6d 22 2c 62 29 3b 41 28 64 2c 22 65 6d 73 67 22 2c 63 2c 21 30 29 3b 61 2e 62 61 28 79 63 28 64 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 44 63 28 61 29 3b 41 28 63 2c 22 70 62 74 22 2c 62 29 3b 61 2e 62 61 28 79 63 28 63 29 29 7d 3b 76 61 72 20 49 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 63 28 29 7b 76 61 72 20 61 3d 28 35 37 31 39 35 39 35 31 32 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 74 68 69 73 2e 75 66 3d 22 61 64 73 2e 22 2b 4b 63 3b 74 68 69 73 2e 79 65 3d 61 3b 74 68 69 73 2e 79 64 3d 22 67 6f 6f 67 6c 65 2e 61 64 73 2e 64 6f 6d 61 69 6e 73 2e 43 61 66 3a 20 22 3b 74 68 69 73 2e 59 65 3d Data Ascii: b,c){var d=Dc(a);A(d,"pbt","tp");A(d,"errm",b);A(d,"emsg",c,!0);a.ba(yc(d))}function Hc(a,b){var c=Dc(a);A(c,"pbt",b);a.ba(yc(c))};var Ic={};function Jc(){var a=(571959512).toString();this.uf="ads."+Kc;this.ye=a;this.yd="google.ads.domains.Caf: ";this.Ye=
2023-10-12 21:29:55 UTC	26	IN	Data Raw: 6e 74 65 72 76 61 6c 28 52 63 2c 35 30 30 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 54 63 29 29 7d 2c 22 66 73 49 4c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 56 63 28 61 2c 62 29 7b 74 68 69 73 2e 51 63 3d 61 3b 74 68 69 73 2e 42 3d 7b 7d 3b 74 68 69 73 2e 55 61 3d 62 3b 51 63 5b 74 68 69 73 2e 51 63 5d 3d 74 68 69 73 3b 55 63 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 42 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 3f 61 2e 42 5b 62 5d 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 58 63 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 42 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 3f 61 2e 42 5b 62 5d 2e 76 61 6c 75 Data Ascii: nterval(Rc,500),window.addEventListener("message",Tc))},"fsIL");function Vc(a,b){this.Qc=a;this.B={};this.Ua=b;Qc[this.Qc]=this;Uc()}function Wc(a,b){return a.B.hasOwnProperty(b)?a.B[b].value:null}function Xc(a,b){return a.B.hasOwnProperty(b)?a.B[b].valu
2023-10-12 21:29:55 UTC	27	IN	Data Raw: 7d 3b 66 64 2e 70 72 6f 74 6f 74 79 70 65 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 3b 66 64 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 66 64 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 64 28 29 7b 5a 63 2e 63 61 6c 6c 28 74 68 69 73 29 7d 73 61 28 67 64 2c 5a 63 29 3b 67 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 62 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 22 7d 3b 0a 67 64 2e 70 72 6f 74 6f 74 79 70 65 2e 52 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 76 61 6c 75 65 29 3a 22 22 7d 3b 67 64 2e 70 72 6f 74 6f 74 79 Data Ascii: };fd.prototype.Ga=function(){return 1};fd.j=function(){return new fd};function gd(){Zc.call(this)}sa(gd,Zc);gd.prototype.ra=function(a,b){return b?b.toString():""};gd.prototype.Ra=function(){return this.value?encodeURIComponent(this.value):""};gd.prototy
2023-10-12 21:29:55 UTC	28	IN	Data Raw: 42 5b 65 5d 3d 66 28 29 29 3b 66 3d 63 2e 42 5b 65 5d 3b 64 3d 66 2e 72 61 28 65 2c 64 29 3b 6e 75 6c 6c 21 3d 64 26 26 66 2e 76 61 6c 75 65 21 3d 64 26 26 28 66 2e 76 61 6c 75 65 3d 64 2c 66 2e 6f 61 3d 21 30 29 7d 61 3d 70 28 61 62 28 63 2e 42 29 29 3b 66 6f 72 28 62 3d 61 2e 6e 65 78 74 28 29 3b 21 62 2e 64 6f 6e 65 3b 62 3d 61 2e 6e 65 78 74 28 29 29 62 3d 62 2e 76 61 6c 75 65 2c 66 3d 63 2e 42 5b 62 5d 2c 66 2e 6f 61 26 26 0a 28 66 2e 6f 61 3d 21 31 2c 66 2e 51 62 28 63 2c 63 2e 51 63 2c 62 2c 66 2e 76 61 6c 75 65 29 29 7d 62 72 65 61 6b 7d 7d 56 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 3d 42 28 56 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 2c 22 66 73 69 48 56 49 22 29 3b 76 61 72 20 6c 64 3d 45 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 50 63 29 Data Ascii: B[e]=f());f=c.B[e];d=f.ra(e,d);null!=d&&f.value!=d&&(f.value=d,f.oa=!0)}a=p(ab(c.B));for(b=a.next();!b.done;b=a.next())b=b.value,f=c.B[b],f.oa&&(f.oa=!1,f.Qb(c,c.Qc,b,f.value))}break}}Vc.prototype.jb=B(Vc.prototype.jb,"fsiHVI");var ld=E(function(){if(Pc)
2023-10-12 21:29:55 UTC	29	IN	Data Raw: 29 7d 3b 6d 2e 63 65 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 78 29 3b 74 68 69 73 2e 79 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 79 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6d 2e 66 6c 6f 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 78 29 3b 74 68 69 73 2e 79 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 79 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6d 2e 72 6f 75 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 78 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 78 29 3b 74 68 69 73 2e 79 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 79 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 6d 2e Data Ascii: )};m.ceil=function(){this.x=Math.ceil(this.x);this.y=Math.ceil(this.y);return this};m.floor=function(){this.x=Math.floor(this.x);this.y=Math.floor(this.y);return this};m.round=function(){this.x=Math.round(this.x);this.y=Math.round(this.y);return this};m.
2023-10-12 21:29:55 UTC	31	IN	Data Raw: 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 72 69 67 68 74 29 3b 74 68 69 73 2e 62 6f 74 74 6f 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 62 6f 74 74 6f 6d 29 3b 74 68 69 73 2e 6c 65 66 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 6c 65 66 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6d 2e 72 6f 75 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 6f 70 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 74 6f 70 29 3b 74 68 69 73 2e 72 69 67 68 74 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 72 69 67 68 74 29 3b 74 68 69 73 2e 62 6f 74 74 6f 6d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 62 6f 74 74 6f 6d 29 3b 74 68 69 73 2e 6c 65 66 74 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 6c 65 66 74 Data Ascii: t=Math.floor(this.right);this.bottom=Math.floor(this.bottom);this.left=Math.floor(this.left);return this};m.round=function(){this.top=Math.round(this.top);this.right=Math.round(this.right);this.bottom=Math.round(this.bottom);this.left=Math.round(this.left
2023-10-12 21:29:55 UTC	32	IN	Data Raw: 6c 6c 21 3d 45 64 26 26 45 64 3e 70 61 72 73 65 46 6c 6f 61 74 28 43 64 29 29 7b 42 64 3d 53 74 72 69 6e 67 28 45 64 29 3b 62 72 65 61 6b 20 61 7d 7d 42 64 3d 43 64 7d 76 61 72 20 46 64 3d 42 64 2c 47 64 3b 69 66 28 77 2e 64 6f 63 75 6d 65 6e 74 26 26 77 64 29 7b 76 61 72 20 48 64 3d 41 64 28 29 3b 47 64 3d 48 64 3f 48 64 3a 70 61 72 73 65 49 6e 74 28 46 64 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 47 64 3d 76 6f 69 64 20 30 3b 76 61 72 20 49 64 3d 47 64 3b 66 75 6e 63 74 69 6f 6e 20 4a 64 28 61 2c 62 29 7b 74 68 69 73 2e 77 69 64 74 68 3d 61 3b 74 68 69 73 2e 68 65 69 67 68 74 3d 62 7d 6d 3d 4a 64 2e 70 72 6f 74 6f 74 79 70 65 3b 6d 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4a 64 28 74 68 69 73 2e Data Ascii: ll!=Ed&&Ed>parseFloat(Cd)){Bd=String(Ed);break a}}Bd=Cd}var Fd=Bd,Gd;if(w.document&&wd){var Hd=Ad();Gd=Hd?Hd:parseInt(Fd,10)\|\|void 0}else Gd=void 0;var Id=Gd;function Jd(a,b){this.width=a;this.height=b}m=Jd.prototype;m.clone=function(){return new Jd(this.
2023-10-12 21:29:55 UTC	33	IN	Data Raw: 63 5b 64 2b 2b 5d 3d 67 29 7d 63 2e 6c 65 6e 67 74 68 3d 64 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 64 28 61 29 7b 61 3d 61 2e 64 6f 63 75 6d 65 6e 74 3b 61 3d 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 61 2e 63 6f 6d 70 61 74 4d 6f 64 65 3f 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 2e 62 6f 64 79 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 64 28 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 61 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 66 75 6e 63 74 69 6f 6e 20 50 64 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 3f 61 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 3a 7a 64 7c 7c 22 43 53 53 31 43 6f 6d 70 61 74 22 21 3d 61 2e 63 6f 6d 70 61 74 4d 6f 64 Data Ascii: c[d++]=g)}c.length=d;return c}return a}function Od(a){a=a.document;a="CSS1Compat"==a.compatMode?a.documentElement:a.body;return new Jd(a.clientWidth,a.clientHeight)}function Pd(a){return a.scrollingElement?a.scrollingElement:zd\|\|"CSS1Compat"!=a.compatMod
2023-10-12 21:29:55 UTC	34	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 29 7b 63 61 73 65 20 22 41 50 50 4c 45 54 22 3a 63 61 73 65 20 22 41 52 45 41 22 3a 63 61 73 65 20 22 42 41 53 45 22 3a 63 61 73 65 20 22 42 52 22 3a 63 61 73 65 20 22 43 4f 4c 22 3a 63 61 73 65 20 22 43 4f 4d 4d 41 4e 44 22 3a 63 61 73 65 20 22 45 4d 42 45 44 22 3a 63 61 73 65 20 22 46 52 41 4d 45 22 3a 63 61 73 65 20 22 48 52 22 3a 63 61 73 65 20 22 49 4d 47 22 3a 63 61 73 65 20 22 49 4e 50 55 54 22 3a 63 61 73 65 20 22 49 46 52 41 4d 45 22 3a 63 61 73 65 20 22 49 53 49 4e 44 45 58 22 3a 63 61 73 65 20 22 4b 45 59 47 45 4e 22 3a 63 61 73 65 20 22 4c 49 4e 4b 22 3a 63 61 73 65 20 22 4e 4f 46 52 41 4d 45 53 22 3a 63 61 73 65 20 22 4e 4f 53 43 52 49 50 Data Ascii: .nodeType)return!1;switch(a.tagName){case "APPLET":case "AREA":case "BASE":case "BR":case "COL":case "COMMAND":case "EMBED":case "FRAME":case "HR":case "IMG":case "INPUT":case "IFRAME":case "ISINDEX":case "KEYGEN":case "LINK":case "NOFRAMES":case "NOSCRIP
2023-10-12 21:29:55 UTC	36	IN	Data Raw: 64 28 61 2c 22 70 6f 73 69 74 69 6f 6e 22 29 2c 64 3d 64 26 26 22 73 74 61 74 69 63 22 3d 3d 63 26 26 61 21 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 61 21 3d 62 2e 62 6f 64 79 2c 21 64 26 26 28 61 2e 73 63 72 6f 6c 6c 57 69 64 74 68 3e 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 61 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 61 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 22 66 69 78 65 64 22 3d 3d 63 7c 7c 22 61 62 73 6f 6c 75 74 65 22 3d 3d 63 7c 7c 22 72 65 6c 61 74 69 76 65 22 3d 3d 63 29 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 64 28 61 29 7b 76 61 72 20 62 3d 4d 64 28 61 29 2c 63 3d 6e 65 77 20 73 64 28 30 2c 30 29 3b 76 61 72 20 64 3d 62 3f 4d 64 28 62 29 3a 64 6f 63 75 6d Data Ascii: d(a,"position"),d=d&&"static"==c&&a!=b.documentElement&&a!=b.body,!d&&(a.scrollWidth>a.clientWidth\|\|a.scrollHeight>a.clientHeight\|\|"fixed"==c\|\|"absolute"==c\|\|"relative"==c))return a;return null}function Vd(a){var b=Md(a),c=new sd(0,0);var d=b?Md(b):docum
2023-10-12 21:29:55 UTC	37	IN	Data Raw: 72 20 64 3d 30 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 3d 28 64 3d 61 2e 69 6e 64 65 78 4f 66 28 62 2c 64 29 29 26 26 64 3c 63 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 64 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 Data Ascii: r d=0;for(var e=b.length;0<=(d=a.indexOf(b,d))&&d<c;){var f=a.charCodeAt(d-1);if(38==f\|\|63==f)if(f=a.charCod
2023-10-12 21:29:55 UTC	37	IN	Data Raw: 65 41 74 28 64 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 38 3d 3d 66 7c 7c 33 35 3d 3d 66 29 62 72 65 61 6b 20 61 3b 64 2b 3d 65 2b 31 7d 64 3d 2d 31 7d 69 66 28 30 3e 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 64 29 3b 69 66 28 30 3e 65 7c 7c 65 3e 63 29 65 3d 63 3b 64 2b 3d 62 2e 6c 65 6e 67 74 68 2b 31 3b 72 65 74 75 72 6e 20 5a 62 28 61 2e 73 6c 69 63 65 28 64 2c 2d 31 21 3d 3d 65 3f 65 3a 30 29 29 7d 3b 76 61 72 20 62 65 3d 7b 7d 2c 63 65 3d 28 62 65 2e 61 64 73 3d 30 2c 62 65 2e 70 6c 61 73 3d 31 2c 62 65 2e 72 65 6c 61 74 65 64 73 65 61 72 63 68 3d 33 2c 62 65 29 2c 64 65 3d 28 21 77 69 6e 64 6f 77 2e 49 53 5f 47 4f 4f 47 4c 45 5f 41 46 53 5f 49 46 52 41 4d 45 5f 7c 7c 50 61 28 29 2c 38 29 2c 72 Data Ascii: eAt(d+e),!f\|\|61==f\|\|38==f\|\|35==f)break a;d+=e+1}d=-1}if(0>d)return null;e=a.indexOf("&",d);if(0>e\|\|e>c)e=c;d+=b.length+1;return Zb(a.slice(d,-1!==e?e:0))};var be={},ce=(be.ads=0,be.plas=1,be.relatedsearch=3,be),de=(!window.IS_GOOGLE_AFS_IFRAME_\|\|Pa(),8),r
2023-10-12 21:29:55 UTC	38	IN	Data Raw: 69 64 20 30 3d 3d 3d 63 3f 6e 75 6c 6c 3a 63 3b 76 61 72 20 64 3d 6e 65 77 20 74 64 28 30 2c 49 6e 66 69 6e 69 74 79 2c 49 6e 66 69 6e 69 74 79 2c 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 4b 64 28 61 29 2c 66 3d 65 2e 55 2e 62 6f 64 79 2c 67 3d 65 2e 55 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 68 3d 50 64 28 65 2e 55 29 2c 6b 3d 61 3b 6b 3d 55 64 28 6b 29 3b 29 69 66 28 21 28 77 64 26 26 30 3d 3d 6b 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 7a 64 26 26 30 3d 3d 6b 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 26 26 6b 3d 3d 66 29 26 26 6b 21 3d 66 26 26 6b 21 3d 67 26 26 22 76 69 73 69 62 6c 65 22 21 3d 53 64 28 6b 2c 22 6f 76 65 72 66 6c 6f 77 22 29 29 7b 76 61 72 20 6c 3d 56 64 28 6b 29 2c 6e 3d 6e 65 77 20 73 64 28 6b 2e 63 6c 69 65 6e 74 4c 65 66 74 Data Ascii: id 0===c?null:c;var d=new td(0,Infinity,Infinity,0);for(var e=Kd(a),f=e.U.body,g=e.U.documentElement,h=Pd(e.U),k=a;k=Ud(k);)if(!(wd&&0==k.clientWidth\|\|zd&&0==k.clientHeight&&k==f)&&k!=f&&k!=g&&"visible"!=Sd(k,"overflow")){var l=Vd(k),n=new sd(k.clientLeft
2023-10-12 21:29:55 UTC	39	IN	Data Raw: 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 64 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 66 72 61 6d 65 73 5b 61 5d 7c 7c 6e 75 6c 6c 7d 63 61 74 63 68 28 64 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 3d 42 28 72 65 2c 22 67 46 42 4e 22 29 3b 76 61 72 20 73 65 3d 6e 75 6c 6c 2c 74 65 3d 71 65 2c 75 65 3d 72 65 3b 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 5b 5d 3a 63 3b 74 68 69 73 2e 66 72 61 6d 65 57 69 64 74 68 3d 61 3b 74 68 69 73 2e 66 72 61 6d 65 48 65 69 67 68 74 3d 62 3b 74 68 69 73 2e 56 61 3d 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 65 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 31 3b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c Data Ascii: eturn c}catch(d){}try{return window.parent.frames[a]\|\|null}catch(d){}return null}re=B(re,"gFBN");var se=null,te=qe,ue=re;function ve(a,b,c){c=void 0===c?[]:c;this.frameWidth=a;this.frameHeight=b;this.Va=c};function we(a,b,c){var d=!1;a.addEventListener(b,
2023-10-12 21:29:55 UTC	41	IN	Data Raw: 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 62 3d 62 3f 5b 22 54 6f 70 22 2c 22 42 6f 74 74 6f 6d 22 5d 3a 5b 22 52 69 67 68 74 22 2c 22 4c 65 66 74 22 5d 3b 76 61 72 20 64 3d 21 31 3b 76 61 72 20 65 3d 43 65 28 29 3f 5b 22 6d 61 72 67 69 6e 22 5d 3a 5b 22 62 6f 72 64 65 72 22 2c 22 6d 61 72 67 69 6e 22 2c 22 70 61 64 64 69 6e 67 22 5d 3b 76 61 72 20 66 3d 65 2e 6c 65 6e 67 74 68 2c 67 3d 62 2e 6c 65 6e 67 74 68 2c 68 3d 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 69 66 28 68 26 26 68 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 28 68 3d 68 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 29 29 7b 64 3d 21 30 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 66 3b 6b 2b 2b 29 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 67 3b Data Ascii: .offsetWidth;b=b?["Top","Bottom"]:["Right","Left"];var d=!1;var e=Ce()?["margin"]:["border","margin","padding"];var f=e.length,g=b.length,h=document.defaultView;if(h&&h.getComputedStyle&&(h=h.getComputedStyle(a))){d=!0;for(var k=0;k<f;k++)for(var l=0;l<g;
2023-10-12 21:29:55 UTC	42	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 64 3d 6e 65 77 20 4a 64 28 64 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 64 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3b 63 3d 4f 65 28 63 29 3b 63 3d 6e 65 77 20 76 65 28 64 2e 77 69 64 74 68 2c 64 2e 68 65 69 67 68 74 2c 63 29 7d 65 6c 73 65 7b 64 3d 4a 65 28 63 29 3b 76 61 72 20 65 3d 4b 65 28 63 29 3b 50 65 28 63 2c 64 2c 65 29 3f 63 3d 6e 65 77 20 76 65 28 31 2c 31 29 3a 28 63 3d 4f 65 28 63 29 2c 63 3d 6e 65 77 20 76 65 28 65 2c 64 2c 63 29 29 7d 64 3d 7b 7d 3b 63 3d 28 64 2e 66 77 3d 63 2e 66 72 61 6d 65 57 69 64 74 68 2c 64 2e 66 68 3d 63 2e 66 72 61 6d 65 48 65 69 67 68 74 2c 64 2e 61 68 3d 63 2e 56 61 2c 64 29 3b 6b 64 28 61 2e 6e 61 6d 65 73 5b 62 5d 2b 22 2e 66 73 22 2c 63 2c 68 Data Ascii: cument.documentElement;d=new Jd(d.offsetWidth,d.offsetHeight);c=Oe(c);c=new ve(d.width,d.height,c)}else{d=Je(c);var e=Ke(c);Pe(c,d,e)?c=new ve(1,1):(c=Oe(c),c=new ve(e,d,c))}d={};c=(d.fw=c.frameWidth,d.fh=c.frameHeight,d.ah=c.Va,d);kd(a.names[b]+".fs",c,h
2023-10-12 21:29:55 UTC	43	IN	Data Raw: 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 6d 62 28 63 29 7d 3b 76 61 72 20 55 65 3d 6a 61 28 5b 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 22 2c 22 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 56 65 28 61 2c 62 29 7b 62 3d 62 5b 61 5d 3b 62 7c 7c 28 43 2e 6c 6f 67 28 22 66 72 61 6d 65 4f 70 74 69 6f 6e 73 20 69 73 20 75 6e 64 65 66 69 6e 65 64 20 66 6f 72 20 22 2b 61 2c 22 66 41 55 22 29 2c 62 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 56 65 3d 42 28 56 65 2c 22 67 46 4f 22 29 3b 66 75 6e 63 74 69 6f 6e 20 57 65 28 61 Data Ascii: for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return mb(c)};var Ue=ja(["//fonts.googleapis.com/css?family=",""]);function Ve(a,b){b=b[a];b\|\|(C.log("frameOptions is undefined for "+a,"fAU"),b={});return b}Ve=B(Ve,"gFO");function We(a
2023-10-12 21:29:55 UTC	44	IN	Data Raw: 2c 75 67 3a 33 32 2c 6e 67 3a 36 34 2c 78 67 3a 31 32 38 2c 70 67 3a 32 35 36 2c 6f 67 3a 35 31 32 2c 73 67 3a 31 30 32 34 7d 29 29 29 3b 76 61 72 20 63 66 3d 2f 3c 5b 5e 3e 5d 2a 3e 7c 26 5b 5e 3b 5d 2b 3b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 64 66 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 61 2e 72 65 70 6c 61 63 65 28 63 66 2c 22 22 29 3a 61 7d 0a 76 61 72 20 65 66 3d 52 65 67 45 78 70 28 22 5b 41 2d 5a 61 2d 7a 5c 75 30 30 63 30 2d 5c 75 30 30 64 36 5c 75 30 30 64 38 2d 5c 75 30 30 66 36 5c 75 30 30 66 38 2d 5c 75 30 32 62 38 5c 75 30 33 30 30 2d 5c 75 30 35 39 30 5c 75 30 39 30 30 2d 5c 75 31 66 66 66 5c 75 32 30 30 65 5c 75 32 63 30 30 2d 5c 75 64 38 30 31 5c 75 64 38 30 34 2d 5c 75 64 38 33 39 5c 75 64 38 33 63 2d 5c 75 64 62 66 66 5c 75 66 39 30 Data Ascii: ,ug:32,ng:64,xg:128,pg:256,og:512,sg:1024})));var cf=/<[^>]*>\|&[^;]+;/g;function df(a,b){return b?a.replace(cf,""):a}var ef=RegExp("[A-Za-z\u00c0-\u00d6\u00d8-\u00f6\u00f8-\u02b8\u0300-\u0590\u0900-\u1fff\u200e\u2c00-\ud801\ud804-\ud839\ud83c-\udbff\uf90
2023-10-12 21:29:55 UTC	45	IN	Data Raw: 76 66 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 2e 4f 3d 3d 3d 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 66 28 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 73 77 69 74 63 68 28 61 2e 53 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 31 3b 63 61 73 65 20 2d 31 3a 72 65 74 75 72 6e 2d 31 3b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 30 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 78 66 28 61 29 7b 72 65 74 75 72 6e 20 76 66 28 61 2c 6b 66 29 3f 61 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 62 3f 48 28 55 62 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 62 3f 48 28 55 62 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 48 28 53 74 72 69 6e 67 28 53 74 72 69 6e 67 28 61 29 Data Ascii: vf(a,b){return null!=a&&a.O===b};function wf(a){if(null!=a)switch(a.S){case 1:return 1;case -1:return-1;case 0:return 0}return null}function xf(a){return vf(a,kf)?a:a instanceof Tb?H(Ub(a).toString()):a instanceof Tb?H(Ub(a).toString()):H(String(String(a)
2023-10-12 21:29:55 UTC	47	IN	Data Raw: 61 63 65 28 2f 3c 5c 2f 2f 67 2c 22 3c 5c 5c 2f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5d 5c 5d 3e 2f 67 2c 22 5d 5d 5c 5c 3e 22 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4c 28 61 29 7b 69 66 28 76 66 28 61 2c 6b 66 29 29 7b 76 61 72 20 62 3d 53 74 72 69 6e 67 3b 61 3d 53 74 72 69 6e 67 28 61 2e 63 6f 6e 74 65 6e 74 29 2e 72 65 70 6c 61 63 65 28 4d 66 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 4e 66 2c 22 26 6c 74 3b 22 29 3b 62 3d 62 28 61 29 2e 72 65 70 6c 61 63 65 28 4f 66 2c 7a 66 29 7d 65 6c 73 65 20 62 3d 53 74 72 69 6e 67 28 61 29 2e 72 65 70 6c 61 63 65 28 79 66 2c 7a 66 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 50 66 28 61 29 7b 76 66 28 61 2c 6e 66 29 3f 61 3d 61 2e 63 6f 6e 74 65 6e 74 3a 28 61 3d 53 74 72 69 6e 67 28 61 29 2c 61 3d 51 Data Ascii: ace(/<\//g,"<\\/").replace(/\]\]>/g,"]]\\>")}function L(a){if(vf(a,kf)){var b=String;a=String(a.content).replace(Mf,"").replace(Nf,"<");b=b(a).replace(Of,zf)}else b=String(a).replace(yf,zf);return b}function Pf(a){vf(a,nf)?a=a.content:(a=String(a),a=Q
2023-10-12 21:29:55 UTC	48	IN	Data Raw: 22 26 23 36 31 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 60 22 3a 22 26 23 39 36 3b 22 2c 22 5c 75 30 30 38 35 22 3a 22 26 23 31 33 33 3b 22 2c 22 5c 75 30 30 61 30 22 3a 22 26 23 31 36 30 3b 22 2c 22 5c 75 32 30 32 38 22 3a 22 26 23 38 32 33 32 3b 22 2c 22 5c 75 32 30 32 39 22 3a 22 26 23 38 32 33 33 3b 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 66 28 61 29 7b 72 65 74 75 72 6e 20 24 66 5b 61 5d 7d 0a 76 61 72 20 61 67 3d 7b 22 5c 78 30 30 22 3a 22 5c 5c 30 20 22 2c 22 5c 62 22 3a 22 5c 5c 38 20 22 2c 22 5c 74 22 3a 22 5c 5c 39 20 22 2c 22 5c 6e 22 3a 22 5c 5c 61 20 22 2c 22 5c 76 22 3a 22 5c 5c 62 20 22 2c 22 5c 66 22 3a 22 5c 5c 63 20 22 2c 22 5c 72 22 3a 22 5c 5c 64 20 22 2c 27 22 27 3a 22 5c 5c 32 32 20 22 2c 22 26 22 3a 22 5c 5c 32 36 20 22 2c 22 27 Data Ascii: "=",">":">","`":"`","\u0085":"","\u00a0":" ","\u2028":" ","\u2029":" "};function zf(a){return $f[a]}var ag={"\x00":"\\0 ","\b":"\\8 ","\t":"\\9 ","\n":"\\a ","\v":"\\b ","\f":"\\c ","\r":"\\d ",'"':"\\22 ","&":"\\26 ","'
2023-10-12 21:29:55 UTC	49	IN	Data Raw: 3a 22 25 45 46 25 42 43 25 38 36 22 2c 22 5c 75 66 66 30 37 22 3a 22 25 45 46 25 42 43 25 38 37 22 2c 22 5c 75 66 66 30 38 22 3a 22 25 45 46 25 42 43 25 38 38 22 2c 22 5c 75 66 66 30 39 22 3a 22 25 45 46 25 42 43 25 38 39 22 2c 22 5c 75 66 66 30 61 22 3a 22 25 45 46 25 42 43 25 38 41 22 2c 22 5c 75 66 66 30 62 22 3a 22 25 45 46 25 42 43 25 38 42 22 2c 22 5c 75 66 66 30 63 22 3a 22 25 45 46 25 42 43 25 38 43 22 2c 22 5c 75 66 66 30 66 22 3a 22 25 45 46 25 42 43 25 38 46 22 2c 22 5c 75 66 66 31 61 22 3a 22 25 45 46 25 42 43 25 39 41 22 2c 22 5c 75 66 66 31 62 22 3a 22 25 45 46 25 42 43 25 39 42 22 2c 22 5c 75 66 66 31 64 22 3a 22 25 45 46 25 42 43 25 39 44 22 2c 22 5c 75 66 66 31 66 22 3a 22 25 45 46 25 42 43 25 39 46 22 2c 22 5c 75 66 66 32 30 22 3a 22 25 Data Ascii: :"%EF%BC%86","\uff07":"%EF%BC%87","\uff08":"%EF%BC%88","\uff09":"%EF%BC%89","\uff0a":"%EF%BC%8A","\uff0b":"%EF%BC%8B","\uff0c":"%EF%BC%8C","\uff0f":"%EF%BC%8F","\uff1a":"%EF%BC%9A","\uff1b":"%EF%BC%9B","\uff1d":"%EF%BC%9D","\uff1f":"%EF%BC%9F","\uff20":"%
2023-10-12 21:29:55 UTC	50	IN	Data Raw: 5b 5c 2f 3f 23 5d 7c 24 29 29 2f 69 2c 59 66 3d 2f 5e 5b 5e 26 3a 5c 2f 3f 23 5d 2a 28 3f 3a 5b 5c 2f 3f 23 5d 7c 24 29 7c 5e 68 74 74 70 73 3f 3a 7c 5e 66 74 70 3a 7c 5e 64 61 74 61 3a 69 6d 61 67 65 5c 2f 5b 61 2d 7a 30 2d 39 2b 2d 5d 2b 3b 62 61 73 65 36 34 2c 5b 61 2d 7a 30 2d 39 2b 5c 2f 5d 2b 3d 2a 24 7c 5e 62 6c 6f 62 3a 2f 69 2c 51 66 3d 2f 5e 28 3f 21 6f 6e 7c 73 72 63 7c 28 3f 3a 61 63 74 69 6f 6e 7c 61 72 63 68 69 76 65 7c 62 61 63 6b 67 72 6f 75 6e 64 7c 63 69 74 65 7c 63 6c 61 73 73 69 64 7c 63 6f 64 65 62 61 73 65 7c 63 6f 6e 74 65 6e 74 7c 64 61 74 61 7c 64 73 79 6e 63 7c 68 72 65 66 7c 68 74 74 70 2d 65 71 75 69 76 7c 6c 6f 6e 67 64 65 73 63 7c 73 74 79 6c 65 7c 75 73 65 6d 61 70 29 5c 73 2a 24 29 28 3f 3a 5b 61 2d 7a 30 2d 39 5f 24 3a 2d Data Ascii: [\/?#]\|$))/i,Yf=/^[^&:\/?#](?:[\/?#]\|$)\|^https?:\|^ftp:\|^data:image\/[a-z0-9+-]+;base64,[a-z0-9+\/]+=$\|^blob:/i,Qf=/^(?!on\|src\|(?:action\|archive\|background\|cite\|classid\|codebase\|content\|data\|dsync\|href\|http-equiv\|longdesc\|style\|usemap)\s*$)(?:[a-z0-9_$:-
2023-10-12 21:29:55 UTC	52	IN	Data Raw: 61 64 64 69 6e 67 3a 37 70 78 20 30 3b 22 3a 22 22 3b 76 61 72 20 4c 6a 3d 76 3f 4f 28 76 29 3a 64 3f 22 31 35 22 3a 22 31 33 22 3b 65 3d 22 3c 73 74 79 6c 65 3e 23 72 65 73 70 6f 6e 73 65 5f 64 65 62 75 67 5f 6f 75 74 70 75 74 7b 6d 61 78 2d 68 65 69 67 68 74 3a 35 30 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 7d 62 6f 64 79 7b 22 2b 0a 28 63 3f 22 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 22 3a 22 22 29 2b 22 63 6f 6c 6f 72 3a 22 2b 28 68 3f 4f 28 68 29 3a 22 23 30 30 30 22 29 2b 22 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2b 28 64 64 3f 22 27 22 2b 53 74 72 69 6e 67 28 64 64 29 2e 72 65 70 6c 61 63 65 28 64 67 2c 62 67 29 2b 22 27 2c 22 3a 22 22 29 2b 28 71 3f 4f 28 71 29 3a 22 61 72 69 Data Ascii: adding:7px 0;":"";var Lj=v?O(v):d?"15":"13";e="<style>#response_debug_output{max-height:500px; overflow:auto;}body{"+(c?"-webkit-text-size-adjust:100%;":"")+"color:"+(h?O(h):"#000")+"; font-family:"+(dd?"'"+String(dd).replace(dg,bg)+"',":"")+(q?O(q):"ari
2023-10-12 21:29:55 UTC	53	IN	Data Raw: 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 22 2b 4f 28 6e 29 2b 22 3b 22 3a 22 22 29 2b 28 4a 28 6e 29 26 26 4a 28 61 64 29 3f 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 22 2b 4f 28 6e 29 2b 22 3b 22 3a 22 22 29 2b 22 7d 23 61 64 42 6c 6f 63 6b 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2b Data Ascii: top:1px solid "+O(n)+";":"")+(J(n)&&J(ad)?"border-bottom:1px solid "+O(n)+";":"")+"}#adBlock h2{font-size:"+
2023-10-12 21:29:55 UTC	53	IN	Data Raw: 4c 6a 2b 22 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 22 2b 28 62 68 3f 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 22 2b 4f 28 62 68 29 2b 22 70 78 3b 22 3a 22 70 61 64 64 69 6e 67 3a 30 3b 22 29 2b 22 6d 61 72 67 69 6e 3a 30 3b 22 2b 28 4a 28 74 29 7c 7c 4a 28 4c 65 29 3f 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2b 28 4c 65 3f 22 27 22 2b 53 74 72 69 6e 67 28 4c 65 29 2e 72 65 70 6c 61 63 65 28 64 67 2c 62 67 29 2b 22 27 2c 22 3a 22 22 29 2b 28 74 3f 4f 28 74 29 2b 22 2c 22 3a 22 22 29 2b 22 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 3a 22 22 29 2b 22 7d 23 61 64 42 6c 6f 63 6b 20 73 70 61 6e 2e 6c 68 48 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 33 70 78 20 34 70 78 20 30 3b 7d 23 61 64 42 6c 6f 63 6b 20 68 32 20 61 2c 20 23 61 Data Ascii: Lj+"px; font-weight:normal;"+(bh?"padding-bottom:"+O(bh)+"px;":"padding:0;")+"margin:0;"+(J(t)\|\|J(Le)?"font-family:"+(Le?"'"+String(Le).replace(dg,bg)+"',":"")+(t?O(t)+",":"")+" sans-serif;":"")+"}#adBlock span.lhHeader{margin:3px 4px 0;}#adBlock h2 a, #a
2023-10-12 21:29:55 UTC	54	IN	Data Raw: 4f 28 5a 61 29 2b 22 70 78 3b 22 3a 22 22 2c 67 3d 22 2e 72 61 64 6c 69 6e 6b 43 7b 22 2b 28 4a 28 65 64 29 26 26 75 3c 76 3f 22 70 61 64 64 69 6e 67 3a 22 2b 4f 28 31 2b 28 76 2d 75 29 29 2b 22 70 78 20 34 70 78 3b 22 3a 22 70 61 64 64 69 6e 67 3a 31 70 78 20 34 70 78 3b 22 29 2b 0a 22 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 7d 2e 63 6f 6c 7b 22 2b 44 62 2b 28 65 64 3f 22 62 6f 72 64 65 72 2d 22 2b 4f 28 62 29 2b 22 3a 31 70 78 20 73 6f 6c 69 64 20 22 2b 4f 28 67 29 2b 22 3b 22 3a 22 22 29 2b 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 22 2b 5a 61 2b 22 7d 22 2b 28 65 64 3f 22 23 61 64 42 6c 6f 63 6b 20 68 32 7b 66 6c 6f 61 74 3a 22 2b 4f 28 66 29 2b 22 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b Data Ascii: O(Za)+"px;":"",g=".radlinkC{"+(J(ed)&&u<v?"padding:"+O(1+(v-u))+"px 4px;":"padding:1px 4px;")+"word-break:break-word;}.col{"+Db+(ed?"border-"+O(b)+":1px solid "+O(g)+";":"")+"vertical-align:top;"+Za+"}"+(ed?"#adBlock h2{float:"+O(f)+"; line-height:1.4em;
2023-10-12 21:29:55 UTC	55	IN	Data Raw: 2c 63 3d 61 2e 74 79 70 65 2c 64 3d 61 2e 67 66 2c 65 3d 61 2e 65 66 2c 66 3d 61 2e 43 65 2c 67 3d 61 2e 44 65 2c 68 3d 61 2e 46 65 2c 6b 3d 61 2e 6d 67 2c 6c 3d 61 2e 6b 67 2c 6e 3d 61 2e 57 65 2c 72 3d 61 2e 56 65 2c 71 3d 61 2e 64 66 2c 74 3d 61 2e 62 66 2c 75 3d 61 2e 45 65 2c 76 3d 61 2e 6c 67 2c 44 3d 61 2e 43 66 2c 4b 3d 61 2e 67 65 2c 4d 3d 61 2e 6a 67 2c 57 3d 61 2e 6a 65 2c 78 61 3d 61 2e 5a 66 2c 46 61 3d 61 2e 55 64 3b 61 3d 61 2e 4b 3b 62 3d 22 73 65 61 72 63 68 62 6f 78 22 3d 3d 63 3f 22 2e 73 62 69 7b 22 2b 28 6b 3f 22 77 69 64 74 68 3a 22 2b 4f 28 6b 29 2b 22 70 78 3b 22 3a 22 77 69 64 74 68 3a 31 30 30 25 3b 22 29 2b 28 6e 3f 22 66 6f 6e 74 2d 73 69 7a 65 3a 22 2b 4f 28 6e 29 2b 22 70 78 3b 22 3a 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 Data Ascii: ,c=a.type,d=a.gf,e=a.ef,f=a.Ce,g=a.De,h=a.Fe,k=a.mg,l=a.kg,n=a.We,r=a.Ve,q=a.df,t=a.bf,u=a.Ee,v=a.lg,D=a.Cf,K=a.ge,M=a.jg,W=a.je,xa=a.Zf,Fa=a.Ud;a=a.K;b="searchbox"==c?".sbi{"+(k?"width:"+O(k)+"px;":"width:100%;")+(n?"font-size:"+O(n)+"px;":"font-size:16p
2023-10-12 21:29:55 UTC	57	IN	Data Raw: 22 2e 22 2b 4f 28 22 61 5f 22 29 2b 22 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 22 2b 4f 28 46 61 29 2b 22 70 78 3b 7d 22 3a 22 22 29 2b 62 2b 22 3c 2f 73 74 79 6c 65 3e 22 29 7d 3b 76 61 72 20 69 67 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 6a 67 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 53 61 28 29 2e 64 61 74 61 2e 68 6d 7c 7c 53 61 28 29 2e 64 61 74 61 2e 74 3f 22 23 62 64 62 64 62 64 22 3a 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 67 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 72 29 7b 72 65 74 75 72 6e 28 72 3d 65 28 72 29 29 3f 43 66 28 72 29 3a 76 6f 69 64 20 30 7d 76 61 72 20 65 3d 57 65 28 62 29 2c 66 3d 58 65 28 62 29 2c 67 3d 65 28 22 74 79 70 65 22 29 7c 7c 22 61 64 73 22 2c 68 3d 50 61 28 29 2c 6b 3d 53 61 28 29 2c 6c 3d Data Ascii: "."+O("a_")+"{border-width:"+O(Fa)+"px;}":"")+b+"</style>")};var ig=-1;function jg(a){return a?a:Sa().data.hm\|\|Sa().data.t?"#bdbdbd":null}function kg(a,b,c){function d(r){return(r=e(r))?Cf(r):void 0}var e=We(b),f=Xe(b),g=e("type")\|\|"ads",h=Pa(),k=Sa(),l=
2023-10-12 21:29:55 UTC	58	IN	Data Raw: 6e 57 69 64 74 68 22 29 2c 66 2e 56 64 3d 65 28 22 61 64 49 63 6f 6e 48 65 69 67 68 74 22 29 2c 66 2e 57 64 3d 65 28 22 61 64 49 63 6f 6e 53 70 61 63 69 6e 67 41 62 6f 76 65 22 29 2c 66 2e 59 64 3d 65 28 22 61 64 49 63 6f 6e 53 70 61 63 69 6e 67 42 65 66 6f 72 65 22 29 2c 66 2e 58 64 3d 65 28 22 61 64 49 63 6f 6e 53 70 61 63 69 6e 67 41 66 74 65 72 22 29 2c 66 2e 5a 64 3d 65 28 22 61 64 49 63 6f 6e 53 70 61 63 69 6e 67 42 65 6c 6f 77 22 29 29 3b 22 72 65 6c 61 74 65 64 73 65 61 72 63 68 22 21 3d 3d 67 7c 7c 78 28 29 2e 4b 28 29 7c 7c 28 66 2e 74 79 70 65 3d 22 72 65 6c 61 74 65 64 73 65 61 72 63 68 22 2c 66 2e 49 65 3d 65 28 22 63 6f 6c 75 6d 6e 53 70 61 63 69 6e 67 22 29 2c 66 2e 6a 66 3d 65 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 46 6c 6f 77 22 29 2c 66 2e Data Ascii: nWidth"),f.Vd=e("adIconHeight"),f.Wd=e("adIconSpacingAbove"),f.Yd=e("adIconSpacingBefore"),f.Xd=e("adIconSpacingAfter"),f.Zd=e("adIconSpacingBelow"));"relatedsearch"!==g\|\|x().K()\|\|(f.type="relatedsearch",f.Ie=e("columnSpacing"),f.jf=e("horizontalFlow"),f.
2023-10-12 21:29:55 UTC	59	IN	Data Raw: 61 64 49 63 6f 6e 55 72 6c 3d 62 7d 76 61 72 20 6f 67 3d 6e 67 3d 42 28 6e 67 2c 22 61 69 49 49 44 22 29 3b 66 75 6e 63 74 69 6f 6e 20 70 67 28 29 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 71 67 28 61 2c 62 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 32 21 3d 3d 63 2e 62 75 74 74 6f 6e 26 26 62 28 63 29 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 67 28 61 29 7b 76 61 72 20 62 3d 22 68 74 74 70 73 22 3d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3b 61 3d 61 2e 63 6c 69 63 6b 74 72 61 63 6b 55 72 6c 3b 72 65 74 75 72 6e 20 50 61 28 29 2e 64 61 74 61 2e 63 74 26 26 79 61 28 61 29 3f 58 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 28 Data Ascii: adIconUrl=b}var og=ng=B(ng,"aiIID");function pg(){};function qg(a,b){a.addEventListener("click",function(c){2!==c.button&&b(c)})};function rg(a){var b="https"==window.location.protocol;a=a.clicktrackUrl;return Pa().data.ct&&ya(a)?Xa(a,function(c){return!(
2023-10-12 21:29:55 UTC	60	IN	Data Raw: 2c 68 3d 66 2e 61 66 64 74 3b 69 66 28 6e 75 6c 6c 21 3d 67 26 26 6e 75 6c 6c 21 3d 68 29 7b 69 66 28 21 63 29 74 68 72 6f 77 20 4c 63 28 22 72 65 73 75 6c 74 73 50 61 67 65 42 61 73 65 55 72 6c 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 65 74 2e 22 29 3b 76 61 72 20 6b 3d 6e 65 77 20 78 63 28 63 29 3b 41 28 6b 2c 64 2c 67 29 3b 41 28 6b 2c 22 61 66 64 54 6f 6b 65 6e 22 2c 68 29 3b 6e 75 6c 6c 21 3d 61 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 26 26 41 28 6b 2c 22 70 63 73 61 22 2c 22 22 2b 61 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 29 3b 66 2e 6c 3d 79 63 28 6b 29 3b 66 2e 75 3d 79 63 28 6b 29 7d 7d 7d 2c 22 66 52 53 43 4c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 76 67 28 29 7b 76 61 72 20 61 3d 7b 76 63 3a 6f 63 28 29 2c 63 67 3a 21 21 78 28 29 Data Ascii: ,h=f.afdt;if(null!=g&&null!=h){if(!c)throw Lc("resultsPageBaseUrl needs to be set.");var k=new xc(c);A(k,d,g);A(k,"afdToken",h);null!=a.personalizedAds&&A(k,"pcsa",""+a.personalizedAds);f.l=yc(k);f.u=yc(k)}}},"fRSCL");function vg(){var a={vc:oc(),cg:!!x()
2023-10-12 21:29:55 UTC	61	IN	Data Raw: 3b 20 74 6f 70 3a 30 3b 20 6c 65 66 74 3a 30 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 22 2b 28 63 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 22 3a 22 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 20 31 30 30 25 3b 22 29 2b 0a 22 7d 2e 22 2b 4f 28 22 76 5f 22 29 2b 22 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 22 2b 28 63 3f 22 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 32 30 25 20 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 22 3a 22 22 29 2b 22 7d 2e 22 2b 4f 28 22 74 5f 22 29 2b 22 7b 22 2b 79 67 28 29 2b 22 7d Data Ascii: ; top:0; left:0; height:100%;"+(c?"background-repeat:repeat-x;":"background-repeat:no-repeat; background-size:auto 100%;")+"}."+O("v_")+"{display:block;"+(c?"height:100%; background-size:20% 100%; background-repeat:repeat-x;":"")+"}."+O("t_")+"{"+yg()+"}
2023-10-12 21:29:55 UTC	63	IN	Data Raw: 3e 20 2e 73 69 31 34 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 23 62 65 64 62 33 39 20 37 70 78 20 73 6f 6c 69 64 3b 7d 2e 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 20 7e 20 2e 73 69 31 30 31 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 34 29 20 3e 20 2e 73 69 31 34 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 23 62 65 64 62 33 39 20 37 70 78 20 73 6f 6c 69 64 3b 7d 2e 73 69 31 30 31 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 35 29 20 3e 20 2e 73 69 31 34 31 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 23 66 66 65 31 31 61 20 37 70 78 20 73 6f 6c 69 64 3b 7d 2e 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 20 7e 20 2e 73 69 31 30 31 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 36 29 20 3e 20 2e 73 69 31 34 31 7b 62 6f 72 64 65 72 2d 6c Data Ascii: > .si141{border-left: #bedb39 7px solid;}.rssAttrContainer ~ .si101:nth-of-type(5n+4) > .si141{border-left: #bedb39 7px solid;}.si101:nth-of-type(5n+5) > .si141{border-left: #ffe11a 7px solid;}.rssAttrContainer ~ .si101:nth-of-type(5n+6) > .si141{border-l
2023-10-12 21:29:55 UTC	64	IN	Data Raw: 63 61 73 65 20 22 62 77 22 3a 63 2b 3d 22 62 6f 72 64 65 72 3a 22 2b 4f 28 61 2e 62 77 29 2b 22 70 78 20 73 6f 6c 69 64 20 22 2b 4f 28 61 2e 62 6f 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 66 22 3a 63 2b 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2b 0a 4f 28 61 2e 66 66 29 2b 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 73 22 3a 63 2b 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 22 2b 4f 28 61 2e 66 73 29 2b 22 70 78 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 22 3a 63 2b 3d 22 68 65 69 67 68 74 3a 22 2b 4f 28 61 2e 68 29 2b 28 2d 31 21 3d 28 22 22 2b 45 66 28 61 2e 68 29 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3f 22 22 3a 22 70 78 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 69 22 3a 63 2b 3d 22 Data Ascii: case "bw":c+="border:"+O(a.bw)+"px solid "+O(a.boc);break;case "ff":c+="font-family:"+O(a.ff)+",arial,sans-serif;";break;case "fs":c+="font-size:"+O(a.fs)+"px";break;case "h":c+="height:"+O(a.h)+(-1!=(""+Ef(a.h)).indexOf("%")?"":"px");break;case "i":c+="
2023-10-12 21:29:55 UTC	65	IN	Data Raw: 3b 22 3a 22 22 29 2b 28 68 2e 62 3f 4f 28 29 2b 22 62 6f 74 74 6f 6d 3a 22 2b 4f 28 68 2e 62 29 2b 22 70 78 3b 22 3a 22 22 29 2b 28 68 2e 6c 3f 4f 28 29 2b 4f 28 6b 29 2b 22 3a 22 2b 4f 28 68 2e 6c 29 2b 22 70 78 3b 22 3a 22 22 29 29 3b 63 2b 3d 68 2b 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 73 22 3a 68 3d 61 2e 62 6f 73 3b 6b 3d 22 22 3b 6c 3d 68 3b 66 6f 72 28 76 61 72 20 6e 3d 6c 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 7b 76 61 72 20 71 3d 6c 5b 72 5d 3b 6b 2b 3d 4f 28 71 2e 78 6f 29 2b 22 70 78 20 22 2b 4f 28 71 2e 79 6f 29 2b 22 70 78 20 22 2b 28 71 2e 62 72 3f 4f 28 71 2e 62 72 29 2b 22 70 78 20 22 2b 28 71 2e 73 72 3f 4f 28 71 2e 73 72 29 2b 22 70 78 20 22 3a 22 22 29 Data Ascii: ;":"")+(h.b?O()+"bottom:"+O(h.b)+"px;":"")+(h.l?O()+O(k)+":"+O(h.l)+"px;":""));c+=h+"position:absolute";break;case "bos":h=a.bos;k="";l=h;for(var n=l.length,r=0;r<n;r++){var q=l[r];k+=O(q.xo)+"px "+O(q.yo)+"px "+(q.br?O(q.br)+"px "+(q.sr?O(q.sr)+"px ":"")
2023-10-12 21:29:55 UTC	66	IN	Data Raw: 20 62 3d 5b 5d 3b 61 3d 70 28 61 2e 73 7c 7c 5b 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 61 2e 6e 65 78 74 28 29 29 7b 63 3d 63 2e 76 61 6c 75 65 3b 76 61 72 20 64 3d 63 2e 72 3b 64 26 26 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 66 66 22 29 26 26 28 64 2e 66 66 3d 43 66 28 64 2e 66 66 29 29 3b 28 64 3d 63 2e 68 72 29 26 26 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 66 66 22 29 26 26 28 64 2e 66 66 3d 43 66 28 64 2e 66 66 29 29 3b 62 2e 70 75 73 68 28 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 73 6b 2c 72 75 6c 65 73 3a 63 2e 72 7c 7c 7b 7d 2c 6b 62 3a 63 2e 68 72 7c 7c 7b 7d 7d 29 7d 61 3d 4d 61 28 29 2e 58 28 29 3b 76 61 72 20 65 3d 22 3c 73 74 79 6c 65 3e 22 3b 63 3d 62 2e 6c 65 Data Ascii: b=[];a=p(a.s\|\|[]);for(var c=a.next();!c.done;c=a.next()){c=c.value;var d=c.r;d&&d.hasOwnProperty("ff")&&(d.ff=Cf(d.ff));(d=c.hr)&&d.hasOwnProperty("ff")&&(d.ff=Cf(d.ff));b.push({className:c.sk,rules:c.r\|\|{},kb:c.hr\|\|{}})}a=Ma().X();var e="<style>";c=b.le
2023-10-12 21:29:55 UTC	68	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 46 67 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 2e 22 3d 3d 63 5b 30 5d 29 72 65 74 75 72 6e 20 62 5b 63 2e 73 75 62 73 74 72 69 6e 67 28 31 29 5d 3b 63 3d 70 28 63 2e 73 70 6c 69 74 28 22 2e 22 29 29 3b 66 6f 72 28 62 3d 63 2e 6e 65 78 74 28 29 3b 21 62 2e 64 6f 6e 65 3b 62 3d 63 2e 6e 65 78 74 28 29 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 62 3d 70 61 72 73 65 49 6e 74 28 62 2c 31 30 29 3b 69 66 28 69 73 4e 61 4e 28 62 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 5b 62 5d 7d 65 6c 73 65 20 69 66 28 7a 61 28 61 29 26 26 61 2e 68 61 73 4f 77 6e 50 Data Ascii: ;function Fg(a,b,c){if(!c)return null;if("."==c[0])return b[c.substring(1)];c=p(c.split("."));for(b=c.next();!b.done;b=c.next()){b=b.value;if(null==a)return null;if(Array.isArray(a)){b=parseInt(b,10);if(isNaN(b))return null;a=a[b]}else if(za(a)&&a.hasOwnP
2023-10-12 21:29:55 UTC	69	IN	Data Raw: 65 2e 6c 65 66 74 3d 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 72 6f 75 6e 64 28 6b 2b 62 29 2c 61 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 2c 0a 61 2e 73 63 72 6f 6c 6c 4c 65 66 74 2b 67 2e 77 69 64 74 68 2d 66 2e 77 69 64 74 68 2d 31 30 29 2b 22 70 78 22 3b 63 2e Data Ascii: e.left=Math.min(Math.max(Math.round(k+b),a.scrollLeft),a.scrollLeft+g.width-f.width-10)+"px";c.
2023-10-12 21:29:55 UTC	69	IN	Data Raw: 73 74 79 6c 65 2e 74 6f 70 3d 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 72 6f 75 6e 64 28 64 2b 65 29 2c 68 29 2c 6c 29 2b 22 70 78 22 3b 63 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 47 67 3d 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 67 28 29 7b 47 67 26 26 28 47 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 47 67 3d 6e 75 6c 6c 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 67 28 61 29 7b 76 61 72 20 62 3d 61 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2c 63 3d 61 2e 69 64 2c 64 3d 61 2e 50 2c 65 3d 61 2e 63 65 2c 66 3d 61 2e 6f 76 65 72 66 6c 6f 77 2c 67 3d 61 2e 4a 65 2c 68 3d 61 2e 75 65 2c 6b 3d 61 2e 72 66 2c 6c 3d 61 2e 68 72 65 66 2c 6e 3d 61 2e 76 63 2c 72 3d 22 22 2c 71 3d 49 28 65 2c 30 Data Ascii: style.top=Math.min(Math.max(Math.round(d+e),h),l)+"px";c.style.display="block";Gg=c}}function Kg(){Gg&&(Gg.style.display="none",Gg=null)};function Lg(a){var b=a.orientation,c=a.id,d=a.P,e=a.ce,f=a.overflow,g=a.Je,h=a.ue,k=a.rf,l=a.href,n=a.vc,r="",q=I(e,0
2023-10-12 21:29:55 UTC	70	IN	Data Raw: 30 3d 3d 62 3f 22 62 6f 74 74 6f 6d 22 3a 22 72 69 67 68 74 22 29 2b 22 3a 20 32 35 70 78 3b 22 3a 22 22 29 7d 62 3d 4b 66 28 71 29 3b 63 2b 3d 27 20 73 74 79 6c 65 3d 22 27 2b 4c 28 4f 28 67 29 29 2b 4c 28 4f 28 68 29 29 2b 4c 28 4f 28 65 29 29 2b 4c 28 4f 28 62 29 29 2b 28 6b 3f 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 22 3a 22 22 29 2b 27 22 27 3b 6b 3d 4a 66 28 63 29 3b 72 2b 3d 6c 3f 22 3c 61 22 2b 52 66 28 4d 67 28 61 29 29 2b 52 66 28 50 66 28 6b 29 29 2b 22 3e 3c 2f 61 3e 22 3a 22 3c 64 69 76 22 2b 52 66 28 50 66 28 6b 29 29 2b 22 3e 3c 2f 64 69 76 3e 22 3b 72 65 74 75 72 6e 20 48 28 72 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 67 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 76 61 72 20 62 3d 61 2e 69 64 2c 63 3d 61 2e 74 65 78 74 2c 64 3d 61 Data Ascii: 0==b?"bottom":"right")+": 25px;":"")}b=Kf(q);c+=' style="'+L(O(g))+L(O(h))+L(O(e))+L(O(b))+(k?"position:relative;":"")+'"';k=Jf(c);r+=l?"<a"+Rf(Mg(a))+Rf(Pf(k))+"></a>":"<div"+Rf(Pf(k))+"></div>";return H(r)}function Ng(a){a=a\|\|{};var b=a.id,c=a.text,d=a
2023-10-12 21:29:55 UTC	71	IN	Data Raw: 22 29 2b 28 64 3f 27 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2b 4c 28 64 29 2b 27 22 27 3a 22 22 29 2b 22 3e 22 3b 62 3d 47 66 28 62 29 3b 64 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 4c 28 22 73 5f 22 29 2b 27 22 3e 3c 2f 64 69 76 3e 27 3b 64 3d 47 66 28 64 29 3b 6c 2b 3d 67 3f 22 3c 61 22 2b 52 66 28 4d 67 28 61 29 29 2b 52 66 28 50 66 28 63 29 29 2b 22 3e 22 2b 28 6b 3f 64 3a 22 22 29 2b 62 2b 22 3c 2f 61 3e 22 3a 22 3c 64 69 76 22 2b 52 66 28 50 66 28 63 29 29 2b 22 3e 22 2b 28 6b 3f 64 3a 22 22 29 2b 62 2b 22 3c 2f 64 69 76 3e 22 3b 72 65 74 75 72 6e 20 48 28 6c 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 50 67 28 61 29 7b 76 61 72 20 62 3d 61 2e 44 66 2c 63 3d 61 2e 45 66 2c 64 3d 61 2e 69 64 2c 65 3d 61 2e 53 66 2c 66 3d 61 2e 54 66 2c 67 3d 61 2e Data Ascii: ")+(d?' aria-label="'+L(d)+'"':"")+">";b=Gf(b);d='<div class="'+L("s_")+'"></div>';d=Gf(d);l+=g?"<a"+Rf(Mg(a))+Rf(Pf(c))+">"+(k?d:"")+b+"</a>":"<div"+Rf(Pf(c))+">"+(k?d:"")+b+"</div>";return H(l)}function Pg(a){var b=a.Df,c=a.Ef,d=a.id,e=a.Sf,f=a.Tf,g=a.
2023-10-12 21:29:55 UTC	73	IN	Data Raw: 20 37 2e 31 39 2c 36 2e 36 33 20 30 2c 37 2e 32 34 20 35 2e 34 36 2c 31 31 2e 39 37 20 33 2e 38 32 2c 31 39 27 2f 3e 3c 2f 73 76 67 3e 22 29 3b 64 2b 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 4c 28 22 77 5f 22 29 2b 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2b 0a 4c 28 58 66 28 61 3f 68 3a 66 29 29 2b 22 29 3b 22 3b 61 3f 28 62 3d 32 30 2f 31 30 35 2a 6b 2a 31 30 30 2b 31 2f 31 30 35 2a 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 6b 29 2c 30 29 2a 31 30 30 2c 64 3d 64 2b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 22 2b 28 4c 28 4f 28 32 45 33 2f 62 29 29 2b 22 25 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 22 2b 4c 28 4f 28 62 29 29 2b 22 25 22 29 29 3a 64 2b 3d 22 77 Data Ascii: 7.19,6.63 0,7.24 5.46,11.97 3.82,19'/></svg>");d+='<div class="'+L("w_")+'" style="background-image: url('+L(Xf(a?h:f))+");";a?(b=20/105k100+1/105Math.max(Math.floor(k),0)100,d=d+"background-size: "+(L(O(2E3/b))+"% 100%; width: "+L(O(b))+"%")):d+="w
2023-10-12 21:29:55 UTC	74	IN	Data Raw: 69 6f 6e 20 67 28 75 2c 76 2c 44 29 7b 76 61 72 20 4b 3d 22 61 64 42 6c 6f 63 6b 22 3d 3d 75 2e 64 62 6b 2c 4d 3d 64 3f 22 5f 62 6c 61 6e 6b 22 3a 22 5f 74 6f 70 22 3b 76 3d 7b 69 64 3a 4b 3f 22 61 64 42 6c 6f 63 6b 22 3a 76 2c 50 3a 28 75 2e 73 6b 7c 7c 22 22 29 2b 22 20 22 2b 28 76 6f 69 64 20 30 3d 3d 3d 44 3f 22 22 3a 44 29 2c 68 61 3a 4d 7d 3b 75 2e 70 62 26 26 28 76 2e 44 64 3d 75 2e 70 62 2e 70 62 74 29 3b 44 3d 22 63 74 63 22 3d 3d 3d 75 2e 64 62 6b 3b 76 61 72 20 57 3d 22 63 74 63 2e 62 74 22 3d 3d 3d 75 2e 64 62 6b 3b 69 66 28 6e 7c 7c 44 7c 7c 57 29 22 22 3d 3d 3d 28 78 28 29 2e 64 61 74 61 2e 63 74 63 6c 74 7c 7c 22 22 29 3f 28 76 2e 68 61 3d 22 5f 73 65 6c 66 22 2c 21 2f 69 28 50 68 6f 6e 65 7c 50 61 64 29 3b 2f 69 2e 74 65 73 74 28 6b 63 29 Data Ascii: ion g(u,v,D){var K="adBlock"==u.dbk,M=d?"_blank":"_top";v={id:K?"adBlock":v,P:(u.sk\|\|"")+" "+(void 0===D?"":D),ha:M};u.pb&&(v.Dd=u.pb.pbt);D="ctc"===u.dbk;var W="ctc.bt"===u.dbk;if(n\|\|D\|\|W)""===(x().data.ctclt\|\|"")?(v.ha="_self",!/i(Phone\|Pad);/i.test(kc)
2023-10-12 21:29:55 UTC	75	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 44 26 26 28 44 3d 70 61 72 73 65 46 6c 6f 61 74 28 44 29 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 44 7c 7c 69 73 4e 61 4e 28 44 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 2e 53 66 3d 62 61 2e 62 75 3b 76 2e 54 66 3d 62 61 2e 66 75 3b 76 2e 44 66 3d 44 3b 76 2e 45 66 3d 57 3b 76 2e 51 65 3d 21 21 78 28 29 2e 64 61 74 61 2e 65 73 72 73 3b 4d 61 28 29 2e 64 61 74 61 2e 69 6e 73 72 26 26 32 3d 3d 6b 3f 28 76 2e 77 69 64 74 68 3d 22 31 37 37 70 78 22 2c 76 2e 68 65 69 67 68 74 3d 22 33 32 70 78 22 29 3a 28 76 2e 77 69 64 74 68 3d 22 36 31 70 78 22 2c 76 2e 68 65 69 67 68 74 3d 22 31 31 70 78 22 29 3b 62 61 3d 50 67 3b 0a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c Data Ascii: ing"==typeof D&&(D=parseFloat(D));if("number"!=typeof D\|\|isNaN(D))return null;v.Sf=ba.bu;v.Tf=ba.fu;v.Df=D;v.Ef=W;v.Qe=!!x().data.esrs;Ma().data.insr&&2==k?(v.width="177px",v.height="32px"):(v.width="61px",v.height="11px");ba=Pg;break;default:return null
2023-10-12 21:29:55 UTC	76	IN	Data Raw: 7b 4b 3d 0a 21 31 3b 66 6f 72 28 76 3d 30 3b 76 3c 75 2e 6c 65 6e 67 74 68 3b 76 2b 2b 29 44 3d 67 28 75 5b 76 5d 29 2c 6e 75 6c 6c 21 3d 44 26 26 28 4b 3d 21 30 2c 4e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 44 29 29 3b 69 66 28 21 4b 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 4d 3f 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4e 29 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4d 29 2c 75 29 3a 4e 7d 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 21 31 3a 64 3b 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 6e 75 6c 6c 3a 65 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 5b 5d 3a 66 3b 76 61 72 20 68 3d 52 67 28 61 2e 73 29 2c 6b 3d 61 2e 61 74 2c 6c 3d Data Ascii: {K=!1;for(v=0;v<u.length;v++)D=g(u[v]),null!=D&&(K=!0,N.appendChild(D));if(!K)return null}return M?(u=document.createDocumentFragment(),u.appendChild(N),u.appendChild(M),u):N}d=void 0===d?!1:d;e=void 0===e?null:e;f=void 0===f?[]:f;var h=Rg(a.s),k=a.at,l=
2023-10-12 21:29:55 UTC	77	IN	Data Raw: 7c 7c 6c 29 26 26 44 67 28 66 2c 28 67 2b 31 29 2a 68 29 29 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 67 28 61 2c 62 29 7b 62 3d 70 28 62 29 3b 66 6f 72 28 76 61 72 20 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 64 3d 63 2e 76 61 6c 75 65 3b 63 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 2e 72 65 29 3b 64 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 2e 6b 66 29 3b 63 26 26 64 26 26 48 67 28 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 42 6c 6f 63 6b 22 29 2c 64 2c 63 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 67 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 48 28 5a Data Ascii: \|\|l)&&Dg(f,(g+1)*h))}}}function Xg(a,b){b=p(b);for(var c=b.next();!c.done;c=b.next()){var d=c.value;c=a.document.getElementById(d.re);d=a.document.getElementById(d.kf);c&&d&&Hg(a.document.getElementById("adBlock"),d,c)}};function Yg(a){a=a\|\|{};return H(Z
2023-10-12 21:29:55 UTC	79	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 62 28 64 2e 62 72 61 6e 64 29 2b 22 3b 22 2b 62 28 64 2e 76 65 72 73 69 6f 6e 29 7d 29 2e 6a 6f 69 6e 28 22 7c 22 29 29 29 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 77 6f 77 36 34 26 26 28 63 2b 3d 22 26 75 61 77 3d 22 2b 4e 75 6d 62 65 72 28 61 2e 77 6f 77 36 34 29 29 3b 72 65 74 75 72 6e 20 63 7d 3b 76 61 72 20 66 68 3d 2f 5e 28 28 6d 61 72 6b 65 74 7c 69 74 6d 73 7c 69 6e 74 65 6e 74 7c 69 74 6d 73 2d 61 70 70 73 73 29 3a 5c 2f 5c 2f 29 2f 69 3b 76 61 72 20 67 68 3d 22 61 6c 74 65 72 6e 61 74 65 20 61 75 74 68 6f 72 20 62 6f 6f 6b 6d 61 72 6b 20 63 61 6e 6f 6e 69 63 61 6c 20 63 69 74 65 20 68 65 6c 70 20 69 63 6f 6e 20 6c 69 63 65 6e 73 65 20 6e 65 78 74 20 70 72 65 66 65 74 63 68 20 64 6e 73 2d Data Ascii: ){return b(d.brand)+";"+b(d.version)}).join("\|")));"undefined"!==typeof a.wow64&&(c+="&uaw="+Number(a.wow64));return c};var fh=/^((market\|itms\|intent\|itms-appss):\/\/)/i;var gh="alternate author bookmark canonical cite help icon license next prefetch dns-
2023-10-12 21:29:55 UTC	80	IN	Data Raw: 6f 6e 2c 66 3d 22 26 61 63 74 3d 31 26 72 69 3d 31 22 3b 64 2e 72 62 26 26 64 2e 53 61 26 26 28 66 2b 3d 65 68 28 64 29 29 3b 64 3d 65 2e 63 61 6c 6c 28 63 2c 64 68 28 64 2c 66 29 2c 22 22 29 3f 61 68 28 64 2c 31 29 3a 61 68 28 64 2c 32 29 7d 65 6c 73 65 20 64 3d 61 68 28 64 2c 30 29 3b 65 6c 73 65 20 64 3d 63 3b 64 3d 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 78 62 7c 7c 21 66 68 2e 74 65 73 74 28 64 29 3f 64 3a 6e 65 77 20 78 62 28 64 2c 7a 62 29 3b 62 21 3d 64 26 26 28 62 3d 53 65 28 64 29 2c 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 61 2e 68 72 65 66 3d 62 29 29 7d 3b 76 61 72 20 6b 68 3d 45 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 6e 65 77 20 6a 68 29 2e 68 61 6e 64 6c 65 28 61 29 7d 2c 22 6d 44 53 22 29 3b 76 61 72 20 6c 68 3d 2f 28 5b 3f 7c 26 5d 7b 31 Data Ascii: on,f="&act=1&ri=1";d.rb&&d.Sa&&(f+=eh(d));d=e.call(c,dh(d,f),"")?ah(d,1):ah(d,2)}else d=ah(d,0);else d=c;d=d instanceof xb\|\|!fh.test(d)?d:new xb(d,zb);b!=d&&(b=Se(d),void 0!==b&&(a.href=b))};var kh=E(function(a){(new jh).handle(a)},"mDS");var lh=/([?\|&]{1
2023-10-12 21:29:55 UTC	81	IN	Data Raw: 3d 75 68 28 61 29 3b 71 67 28 61 2e 65 6c 65 6d 65 6e 74 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 6d 64 28 22 2e 61 43 53 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 3b 6c 64 28 29 3b 61 2e 42 61 26 26 28 62 28 64 29 2c 63 28 64 29 29 3b 74 72 79 7b 6b 68 28 61 2e 65 6c 65 6d 65 6e 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 77 68 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 62 29 26 26 31 36 33 33 34 3e 61 2e 6c 65 6e 67 74 68 2b 62 2e 6c 65 6e 67 74 68 26 26 28 61 2b 3d 62 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2c 31 36 33 33 34 3c 61 2e 6c 65 6e 67 74 68 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 36 33 33 34 29 3a 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 68 Data Ascii: =uh(a);qg(a.element,function(d){md(".aCS",Date.now());ld();a.Ba&&(b(d),c(d));try{kh(a.element)}catch(e){}})}function wh(a,b,c){return-1==a.indexOf(b)&&16334>a.length+b.length&&(a+=b+encodeURIComponent(c),16334<a.length)?a.substring(0,16334):a}function xh
2023-10-12 21:29:55 UTC	82	IN	Data Raw: 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 5b 5d 3a 66 3b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 6e 75 6c 6c 3a 67 3b 74 68 69 73 2e 65 65 3d 79 68 3b 74 68 69 73 2e 6b 61 3d 5b 5d 3b 74 68 69 73 2e 4e 62 3d 5b 5d 3b 74 68 69 73 2e 58 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 4d 3d 65 3b 74 68 69 73 2e 56 66 3d 65 67 28 42 67 28 62 29 29 3b 76 61 72 20 68 3d 44 68 28 62 29 3b 6e 75 6c 6c 21 3d 68 26 26 28 74 68 69 73 2e 58 61 3d 56 67 28 7b 73 3a 5b 68 5d 2c 6c 3a 22 73 69 31 32 38 22 3d 3d 3d 68 2e 73 6b 3f 42 68 3a 43 68 7d 2c 7b 7d 2c 7b 7d 29 2e 72 6f 6f 74 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 58 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3b 61 3d 70 28 61 29 3b 66 6f 72 28 76 61 72 20 6b Data Ascii: ,b,c,d,e,f,g){f=void 0===f?[]:f;g=void 0===g?null:g;this.ee=yh;this.ka=[];this.Nb=[];this.Xa=null;this.M=e;this.Vf=eg(Bg(b));var h=Dh(b);null!=h&&(this.Xa=Vg({s:[h],l:"si128"===h.sk?Bh:Ch},{},{}).rootElement,this.Xa.removeAttribute("id"));a=p(a);for(var k
2023-10-12 21:29:55 UTC	84	IN	Data Raw: 0a 5a 67 28 62 2c 22 67 6f 6f 67 41 46 53 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 2b 3d 5a 67 28 62 2c 22 67 6f 6f 67 41 46 53 68 50 4c 41 73 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 64 2b 3d 5a 67 28 29 7d 61 3d 48 28 64 29 3b 61 3d 65 67 28 61 29 3b 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 6e 64 65 72 2d 63 6f 6d 70 6c 65 74 65 22 2c 21 30 29 3b 72 65 74 75 72 6e 20 65 7d 0a 45 68 2e 70 72 6f 74 6f 74 79 70 65 2e 46 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 6e 75 6c 6c 2c 64 3d 78 65 28 29 3b 69 66 28 22 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 28 6e 65 77 20 Data Ascii: Zg(b,"googAFS");break;case 2:d+=Zg(b,"googAFShPLAs");break;default:d+=Zg()}a=H(d);a=eg(a);e.appendChild(a);a.setAttribute("data-render-complete",!0);return e}Eh.prototype.Fd=function(a){var b=this,c=null,d=xe();if("MutationObserver"in window)return(new
2023-10-12 21:29:55 UTC	85	IN	Data Raw: 22 2e 62 5f 22 29 29 3b 66 6f 72 28 66 3d 65 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 65 2e 6e 65 78 74 28 29 29 66 2e 76 61 6c 75 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 67 22 2c 0a 22 74 72 75 65 22 29 3b 61 2e 65 65 28 64 2c 62 2c 63 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 3b Data Ascii: ".b_"));for(f=e.next();!f.done;f=e.next())f.value.setAttribute("data-bg","true");a.ee(d,b,c.document.body);
2023-10-12 21:29:55 UTC	85	IN	Data Raw: 64 3d 70 28 61 2e 6b 61 29 3b 66 6f 72 28 65 3d 64 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 64 2e 6e 65 78 74 28 29 29 65 3d 65 2e 76 61 6c 75 65 2c 58 67 28 63 2c 65 2e 51 64 7c 7c 5b 5d 29 2c 57 67 28 62 2c 65 2e 4f 66 29 3b 30 3c 61 2e 4e 62 2e 6c 65 6e 67 74 68 26 26 58 67 28 63 2c 61 2e 4e 62 29 7d 3b 76 61 72 20 49 68 3d 45 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 21 31 3a 63 3b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 79 68 3a 64 3b 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 48 67 3a 65 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 57 67 3a 66 3b 66 6f 72 28 76 61 72 20 67 3d 70 28 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 77 74 61 2d 62 75 62 Data Ascii: d=p(a.ka);for(e=d.next();!e.done;e=d.next())e=e.value,Xg(c,e.Qd\|\|[]),Wg(b,e.Of);0<a.Nb.length&&Xg(c,a.Nb)};var Ih=E(function(a,b,c,d,e,f){c=void 0===c?!1:c;d=void 0===d?yh:d;e=void 0===e?Hg:e;f=void 0===f?Wg:f;for(var g=p(b.querySelectorAll("[data-wta-bub
2023-10-12 21:29:55 UTC	86	IN	Data Raw: 68 29 29 7b 76 61 72 20 64 3d 63 5b 30 5d 2c 65 3d 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 68 69 64 65 2d 6e 6f 64 65 2d 65 76 65 6e 74 3d 22 53 43 52 4f 4c 4c 5f 42 45 47 49 4e 22 5d 27 29 2c 66 3d 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 68 69 64 65 2d 6e 6f 64 65 2d 65 76 65 6e 74 3d 22 53 43 52 4f 4c 4c 5f 45 4e 44 22 5d 27 29 3b 63 3d 30 3c 65 2e 6c 65 6e 67 74 68 7c 7c 30 3c 66 2e 6c 65 6e 67 74 68 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6c 3d 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 72 6f 75 6e 64 28 64 2e 73 63 72 6f 6c 6c 4c 65 66 74 29 29 2c 6e 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 64 2e 73 63 72 6f 6c 6c 54 6f 70 29 2c 72 3d 70 28 65 Data Ascii: h)){var d=c[0],e=b.querySelectorAll('[data-hide-node-event="SCROLL_BEGIN"]'),f=b.querySelectorAll('[data-hide-node-event="SCROLL_END"]');c=0<e.length\|\|0<f.length;var g=function(){for(var l=Math.abs(Math.round(d.scrollLeft)),n=Math.round(d.scrollTop),r=p(e
2023-10-12 21:29:55 UTC	87	IN	Data Raw: 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 68 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 68 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 35 30 3e 63 3b 2b 2b 63 29 7b 74 72 79 7b 76 61 72 20 64 3d 21 28 21 61 2e 66 72 61 6d 65 73 7c 7c 21 61 2e 66 72 61 6d 65 73 5b 62 5d 29 7d 63 61 74 63 68 28 67 29 7b 64 3d 21 31 7d 69 66 28 64 29 72 65 74 75 72 6e 20 61 3b 61 3a 7b 74 72 79 7b 76 61 72 20 65 3d 61 2e 70 61 72 65 6e 74 3b 69 66 28 65 26 Data Ascii: er&&a.addEventListener(b,c,!1)};function Kh(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Lh(a,b){for(var c=0;50>c;++c){try{var d=!(!a.frames\|\|!a.frames[b])}catch(g){d=!1}if(d)return a;a:{try{var e=a.parent;if(e&
2023-10-12 21:29:55 UTC	89	IN	Data Raw: 73 2e 42 62 28 29 3a 77 65 28 74 68 69 73 2e 70 61 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 42 62 28 29 7d 29 29 7d 7d 3b 0a 6d 2e 42 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 62 3d 74 68 69 73 2e 70 61 3b 62 26 26 28 62 3d 62 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3f 62 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3a 62 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3f 62 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3a 6e 75 6c 6c 29 26 26 28 74 68 69 73 2e 66 61 3d 22 31 22 2c 62 2e 6f 70 65 6e 28 29 2c 69 68 28 62 29 2c 62 2e 63 6c 6f 73 65 28 29 2c 4e 68 28 74 68 69 73 2e 55 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 57 62 28 Data Ascii: s.Bb():we(this.pa,"load",function(){return a.Bb()}))}};m.Bb=function(){var a=this,b=this.pa;b&&(b=b.contentDocument?b.contentDocument:b.contentWindow?b.contentWindow.document:null)&&(this.fa="1",b.open(),ih(b),b.close(),Nh(this.Uf,function(){return a.Wb(
2023-10-12 21:29:55 UTC	90	IN	Data Raw: 65 74 75 72 6e 7b 7d 3b 76 61 72 20 62 3d 7b 7d 3b 61 3d 70 28 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 61 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 64 3d 63 2e 76 61 6c 75 65 3b 63 3d 64 2e 6e 3b 64 3d 64 2e 76 3b 22 74 22 3d 3d 3d 64 3f 62 5b 63 5d 3d 21 30 3a 22 66 22 21 3d 3d 64 26 26 28 62 5b 63 5d 3d 64 29 7d 72 65 74 75 72 6e 20 62 7d 2c 22 63 4a 43 54 4d 22 29 3b 76 61 72 20 55 68 3d 6a 61 28 5b 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 22 2c 22 22 5d 29 2c 56 68 3d 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 57 68 28 61 29 7b 76 61 72 20 62 3d 21 21 78 28 29 2e 64 61 74 61 2e 61 72 62 77 66 2c 63 3d 61 3b Data Ascii: eturn{};var b={};a=p(a);for(var c=a.next();!c.done;c=a.next()){var d=c.value;c=d.n;d=d.v;"t"===d?b[c]=!0:"f"!==d&&(b[c]=d)}return b},"cJCTM");var Uh=ja(["https://fonts.googleapis.com/css?family=",""]),Vh=document;function Wh(a){var b=!!x().data.arbwf,c=a;
2023-10-12 21:29:55 UTC	91	IN	Data Raw: 2b 22 20 2d 20 22 2b 66 2e 76 62 2c 22 6d 66 66 6c 22 29 7d 7d 28 63 29 29 7d 7d 7d 3b 76 61 72 20 24 68 3d 6e 75 6c 6c 2c 61 69 3d 7b 61 64 73 3a 30 2c 72 73 73 3a 32 2c 70 62 73 3a 33 2c 61 64 5f 64 61 74 61 3a 38 2c 73 62 73 3a 35 7d 2c 62 69 3d 7b 74 65 78 74 5f 61 64 73 3a 30 2c 70 6c 61 5f 6e 70 61 63 6b 3a 33 2c 72 65 6c 61 74 65 64 5f 73 65 61 72 63 68 3a 32 7d 2c 63 69 3d 7b 73 74 61 74 75 73 41 64 75 6c 74 3a 22 73 2e 61 44 55 4c 54 22 2c 73 74 61 74 75 73 46 61 69 6c 6c 69 73 74 65 64 3a 22 73 2e 66 4c 22 2c 73 74 61 74 75 73 54 72 61 64 65 6d 61 72 6b 3a 22 73 2e 74 4d 22 2c 73 74 61 74 75 73 4e 65 65 64 73 52 65 76 69 65 77 3a 22 73 2e 6e 52 22 7d 2c 64 69 3d 7b 7d 2c 65 69 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 66 69 28 61 29 7b 21 24 68 26 Data Ascii: +" - "+f.vb,"mffl")}}(c))}}};var $h=null,ai={ads:0,rss:2,pbs:3,ad_data:8,sbs:5},bi={text_ads:0,pla_npack:3,related_search:2},ci={statusAdult:"s.aDULT",statusFaillisted:"s.fL",statusTrademark:"s.tM",statusNeedsReview:"s.nR"},di={},ei=!1;function fi(a){!$h&
2023-10-12 21:29:55 UTC	92	IN	Data Raw: 22 69 6e 20 6b 26 26 6e 64 28 62 2b 22 2e 65 56 22 2c 6b 2e 69 65 76 29 3b 6c 69 28 67 2c 62 29 3b 63 3d 64 2e 46 64 28 63 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 28 76 29 3b 6e 64 28 22 77 72 73 22 2c 21 30 29 3b 72 65 74 75 72 6e 20 76 7d 29 3b 66 26 26 68 2e 72 65 6c 61 74 65 64 53 65 61 72 63 68 55 73 65 52 65 73 75 6c 74 43 61 6c 6c 62 61 63 6b 26 26 28 63 3d 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 76 29 7b 6d 69 28 76 2c 65 29 3b 72 65 74 75 72 6e 20 76 7d 29 29 3b 72 65 74 75 72 6e 20 63 7d 6b 69 3d 42 28 6b 69 2c 22 66 53 41 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 6e 69 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 4d 61 28 29 2e 58 28 29 26 26 28 61 2e 64 6f 63 75 6d 65 6e 74 2e 64 69 72 3d 22 72 74 6c 22 29 3b Data Ascii: "in k&&nd(b+".eV",k.iev);li(g,b);c=d.Fd(c).then(function(v){r(v);nd("wrs",!0);return v});f&&h.relatedSearchUseResultCallback&&(c=c.then(function(v){mi(v,e);return v}));return c}ki=B(ki,"fSA");function ni(a,b,c,d,e,f,g,h){Ma().X()&&(a.document.dir="rtl");
2023-10-12 21:29:55 UTC	93	IN	Data Raw: 6f 6e 20 73 69 28 61 2c 62 29 7b 61 3d 75 65 28 61 2c 62 29 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 62 3d 6e 75 6c 6c 3b 74 72 79 7b 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 42 6c 6f 63 6b 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 6e 75 6c 6c 3a 61 7d 73 69 3d 42 28 73 69 2c 22 67 46 49 41 42 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 69 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 73 72 61 62 22 29 2c 68 3d 66 69 28 61 29 2c 6b 3d 50 61 28 29 2c 6c 3d 6e 65 77 20 58 68 2c 6e 3d 5b 5d 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: on si(a,b){a=ue(a,b);if(null==a)return null;b=null;try{b=a.document.getElementById("adBlock")}catch(c){}return null==b?null:a}si=B(si,"gFIAB");function ti(a,b,c,d,e,f){var g=document.getElementById("ssrab"),h=fi(a),k=Pa(),l=new Xh,n=[],r=document.getElem
2023-10-12 21:29:55 UTC	95	IN	Data Raw: 63 74 6f 72 28 22 68 65 61 64 22 29 26 26 71 69 28 64 29 7d 76 61 72 20 67 3d 28 64 3d 63 2e 61 74 29 26 26 30 3c 64 2e 6c 65 6e 67 74 68 3f 6e 65 77 20 50 68 28 64 29 3a 76 6f 69 64 20 30 2c 68 3d 28 64 3d 63 2e 61 63 74 29 3f 6e 65 77 20 50 68 28 64 29 3a 76 6f 69 64 20 30 2c 6b 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 69 29 2e 73 6c 69 63 65 28 29 2c 6c 3d 6e 65 77 20 58 68 3b 64 3d 5b 5d 3b 69 66 28 6f 65 28 29 29 74 69 28 61 2c 62 2c 63 2c 65 2c 66 2c 22 41 34 54 56 44 30 6f 44 6f 52 55 6e 42 5a 67 59 44 64 4e 56 41 52 59 49 50 53 6d 4a 67 79 53 45 73 59 64 50 41 4e 52 72 72 67 51 37 51 69 74 50 73 4f 74 79 30 65 5a 49 42 73 6a 6c 48 46 46 4a 77 44 46 55 2f 38 51 6d 6e 52 46 32 6b 4c 35 78 62 34 52 50 39 51 34 41 41 41 43 45 65 79 4a 76 63 6d 6c 6e Data Ascii: ctor("head")&&qi(d)}var g=(d=c.at)&&0<d.length?new Ph(d):void 0,h=(d=c.act)?new Ph(d):void 0,k=Object.keys(di).slice(),l=new Xh;d=[];if(oe())ti(a,b,c,e,f,"A4TVD0oDoRUnBZgYDdNVARYIPSmJgySEsYdPANRrrgQ7QitPsOty0eZIBsjlHFFJwDFU/8QmnRF2kL5xb4RP9Q4AAACEeyJvcmln
2023-10-12 21:29:55 UTC	96	IN	Data Raw: 72 20 7a 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 2c 41 69 3d 6e 75 6c 6c 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 69 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 65 3d 74 65 28 61 29 2e 66 72 61 6d 65 73 3b 69 66 28 7a 69 29 7b 41 69 26 26 41 69 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 3b 76 61 72 20 66 3d 63 3b 41 69 3d 6e 65 77 20 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3f 66 3d 21 31 3a 51 65 28 61 29 7d 29 3b 76 61 72 20 67 3d 70 28 65 29 3b 66 6f 72 28 65 3d 67 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 67 2e 6e 65 78 74 28 29 29 41 69 2e 6f 62 73 65 72 76 65 28 65 2e 76 61 6c 75 65 2e 64 6f 63 75 6d 65 6e 74 Data Ascii: r zi="function"===typeof ResizeObserver,Ai=null;function yi(a,b,c){function d(){var e=te(a).frames;if(zi){Ai&&Ai.disconnect();var f=c;Ai=new ResizeObserver(function(){f?f=!1:Qe(a)});var g=p(e);for(e=g.next();!e.done;e=g.next())Ai.observe(e.value.document
2023-10-12 21:29:55 UTC	97	IN	Data Raw: 65 28 61 29 7d 63 61 74 63 68 28 64 29 7b 76 61 72 20 63 3d 64 2e 6d 65 73 73 61 67 65 3b 61 26 26 28 63 3d 22 49 6e 76 61 6c 69 64 20 77 69 6e 64 6f 77 2e 6e 61 6d 65 3a 20 22 2b 61 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 29 3b 43 2e 6c 6f 67 28 63 2c 22 70 4e 41 4f 22 29 7d 72 65 74 75 72 6e 20 62 7c 7c 7b 7d 7d 45 69 3d 42 28 45 69 2c 22 70 4e 41 4f 22 29 3b 66 75 6e 63 74 69 6f 6e 20 46 69 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 22 6e 61 6d 65 22 3d 3d 64 3f 63 5b 64 5d 3d 68 65 28 65 29 7c 7c 2f 5e 6d 61 73 74 65 72 2d 5c 64 2b 24 2f 2e 74 65 73 74 28 65 29 3f 65 3a 6e 75 6c 6c 3a 44 69 28 64 2c 65 29 26 26 28 65 3d 43 69 28 65 2c 62 29 2c 63 5b 64 5d 3d 65 2c 64 69 5b Data Ascii: e(a)}catch(d){var c=d.message;a&&(c="Invalid window.name: "+a.split(",")[0]);C.log(c,"pNAO")}return b\|\|{}}Ei=B(Ei,"pNAO");function Fi(a,b){var c={},d;for(d in a){var e=a[d];"name"==d?c[d]=he(e)\|\|/^master-\d+$/.test(e)?e:null:Di(d,e)&&(e=Ci(e,b),c[d]=e,di[
2023-10-12 21:29:55 UTC	98	IN	Data Raw: 74 28 4b 29 3f 76 3d 21 30 3a 65 66 2e 74 65 73 74 28 64 66 28 4b 29 29 3f 75 2b 2b 3a 6a 66 2e 74 65 73 74 28 4b 29 26 26 28 76 3d 0a 21 30 29 7d 74 3d 30 3d 3d 75 3f 76 3f 31 3a 30 3a 2e 34 3c 74 2f 75 3f 2d 31 3a 31 3b 6e 75 6c 6c 21 3d 71 26 26 76 6f 69 64 20 30 21 3d 3d 71 2e 53 26 26 28 71 2e 53 3d 74 29 3b 71 3d 74 7d 6e 3d 27 3c 73 70 61 6e 20 64 69 72 3d 22 27 2b 28 30 3e 71 3f 22 72 74 6c 22 3a 22 6c 74 72 22 29 2b 27 22 3e 27 2b 78 66 28 6e 29 2b 22 3c 2f 73 70 61 6e 3e 22 7d 65 6c 73 65 20 6e 3d 22 22 3b 6c 3d 6c 28 6e 29 3b 68 2b 3d 6b 2b 6c 2b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 4c 28 22 68 5f 22 29 2b 27 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2b 4c 28 58 66 28 6e 75 6c 6c 21 Data Ascii: t(K)?v=!0:ef.test(df(K))?u++:jf.test(K)&&(v=!0)}t=0==u?v?1:0:.4<t/u?-1:1;null!=q&&void 0!==q.S&&(q.S=t);q=t}n='<span dir="'+(0>q?"rtl":"ltr")+'">'+xf(n)+"</span>"}else n="";l=l(n);h+=k+l+'<div class="'+L("h_")+'" style="background-image: url('+L(Xf(null!
2023-10-12 21:29:55 UTC	100	IN	Data Raw: 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 41 36 2e 34 37 31 20 36 2e 34 37 31 20 30 20 30 20 30 20 31 36 20 39 2e 35 20 36 2e 35 20 36 2e 35 20 30 20 31 20 30 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c 32 30 2e 34 39 20 31 39 6c 2d 34 2e 39 39 2d 35 7a 6d 2d 36 20 30 43 37 2e 30 31 20 31 34 20 35 20 31 31 2e 39 39 20 35 20 39 2e 35 53 37 2e 30 31 20 35 20 39 2e 35 20 35 20 31 34 20 37 2e 30 31 20 31 34 20 39 2e 35 20 31 31 2e 39 39 20 31 34 20 39 2e 35 20 31 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 27 29 2b 67 2b 22 3c 2f 61 3e 3c 2f 64 69 76 3e 22 29 29 3a 28 6b 3d 49 66 28 22 22 2b 53 66 28 67 2e 6c 29 29 Data Ascii: 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"></path></svg></span>')+g+"</a></div>")):(k=If(""+Sf(g.l))
2023-10-12 21:29:55 UTC	101	IN	Data Raw: 72 3e 3c 74 64 20 63 6c 61 73 73 3d 22 73 62 69 2d 74 64 22 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 73 62 69 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 71 75 65 72 79 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 36 33 22 20 74 69 74 6c 65 3d 22 45 6e 74 65 72 20 61 20 73 65 61 72 63 68 22 20 61 75 74 6f 63 Data Ascii: r><td class="sbi-td"><input class="sbi" type="text" name="query" maxlength="63" title="Enter a search" autoc
2023-10-12 21:29:55 UTC	101	IN	Data Raw: 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 2f 3e 3c 2f 74 64 3e 3c 74 64 3e 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 73 62 62 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 3d 22 27 2b 28 61 3f 4c 28 61 29 3a 22 53 65 61 72 63 68 22 29 2b 27 22 2f 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 66 64 54 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 27 2b 0a 4c 28 66 29 2b 27 22 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 73 65 61 72 63 68 22 20 76 61 6c 75 65 3d 22 31 22 2f 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 27 3b 66 3d 48 28 63 29 7d 63 3d 63 3d 7b 4e 61 3a 4e 61 28 4d 61 28 29 29 7d Data Ascii: omplete="off"/></td><td><input class="sbb" type="submit" value="'+(a?L(a):"Search")+'"/></td></tr></tbody></table><input type="hidden" name="afdToken" value="'+L(f)+'"/><input type="hidden" name="search" value="1"/></form></div>';f=H(c)}c=c={Na:Na(Ma())}
2023-10-12 21:29:55 UTC	102	IN	Data Raw: 70 6c 61 73 2e 6c 65 6e 67 74 68 3a 30 29 29 2c 65 69 26 26 2f 5e 6d 61 73 74 65 72 2d 5c 64 2b 24 2f 2e 74 65 73 74 28 74 29 29 30 3c 64 26 26 43 2e 6c 6f 67 28 61 2e 6c 65 6e 67 74 68 2c 22 70 41 4a 33 22 29 2c 0a 64 65 6c 65 74 65 20 64 69 5b 74 5d 3b 65 6c 73 65 20 69 66 28 6e 64 28 74 2b 22 2e 68 41 22 2c 30 3c 64 29 2c 51 61 28 66 29 26 26 6d 64 28 74 2b 22 2e 61 43 22 2c 64 29 2c 31 3e 64 29 7b 69 66 28 61 3d 75 65 28 74 2c 62 29 29 74 72 79 7b 28 75 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 64 42 6c 6f 63 6b 22 29 29 26 26 6c 67 28 59 67 28 7b 4e 61 3a 4e 61 28 67 29 7d 29 2c 75 29 7d 63 61 74 63 68 28 44 29 7b 7d 64 65 6c 65 74 65 20 64 69 5b 74 5d 7d 66 6f 72 28 76 61 72 20 76 20 69 6e 20 63 69 29 63 Data Ascii: plas.length:0)),ei&&/^master-\d+$/.test(t))0<d&&C.log(a.length,"pAJ3"),delete di[t];else if(nd(t+".hA",0<d),Qa(f)&&md(t+".aC",d),1>d){if(a=ue(t,b))try{(u=a.document.getElementById("adBlock"))&&lg(Yg({Na:Na(g)}),u)}catch(D){}delete di[t]}for(var v in ci)c
2023-10-12 21:29:55 UTC	103	IN	Data Raw: 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 28 63 3d 63 2e 76 61 6c 75 65 29 26 26 61 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 69 28 61 2c 62 29 7b 61 3d 70 28 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 61 22 29 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6e 65 78 74 28 29 2c 64 3d 7b 7d 3b 21 63 2e 64 6f 6e 65 3b 64 3d 7b 43 62 3a 64 2e 43 62 2c 44 62 3a 64 2e 44 62 7d 2c 63 3d 61 2e 6e 65 78 74 28 29 29 63 3d 63 2e 76 61 6c 75 65 2c 64 2e 43 62 3d 61 65 28 63 2e 68 72 65 66 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 62 2e 6e 61 6d 65 5d 2e 72 65 73 75 6c 74 73 50 61 67 65 51 75 65 72 79 50 61 72 61 6d 29 29 2c 64 2e 44 62 3d 61 65 28 63 2e 68 72 65 66 2c 65 6e Data Ascii: ne;c=b.next())(c=c.value)&&a.push(c);return a}function mi(a,b){a=p(a.getElementsByTagName("a"));for(var c=a.next(),d={};!c.done;d={Cb:d.Cb,Db:d.Db},c=a.next())c=c.value,d.Cb=ae(c.href,encodeURIComponent(b[b.name].resultsPageQueryParam)),d.Db=ae(c.href,en
2023-10-12 21:29:55 UTC	105	IN	Data Raw: 70 65 2c 65 29 2c 22 2a 22 29 7d 29 3b 61 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6b 61 28 64 2e 74 6f 75 63 68 65 73 29 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 28 66 29 7d 29 3b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 62 28 64 2e 74 79 70 65 2c 65 29 2c 22 2a 22 29 7d 29 7d 78 69 3d 42 28 78 69 2c 22 70 54 45 54 50 50 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 69 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6d 65 74 61 22 29 3b 62 2e 68 74 74 70 45 71 75 69 76 Data Ascii: pe,e),"")});a.document.addEventListener("touchcancel",function(d){var e=[].concat(ka(d.touches)).map(function(f){return c(f)});window.parent.postMessage(b(d.type,e),"")})}xi=B(xi,"pTETPP");function qi(a){var b=document.createElement("meta");b.httpEquiv
2023-10-12 21:29:55 UTC	106	IN	Data Raw: 72 6e 20 6e 75 6c 6c 3b 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 30 3d 3d 62 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 62 7d 3b 50 69 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 74 68 69 73 2e 44 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 7c 7c 31 3e 61 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 74 68 69 73 2e 65 61 2e 47 28 61 5b 30 5d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 69 28 29 7b 7d 51 69 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 74 72 75 65 2c 20 66 61 6c 73 65 22 7d 3b 51 69 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 7c 7c 31 3d 3d 3d 61 3f 31 3d 3d 3d 61 3a 22 74 72 75 65 22 3d Data Ascii: rn null;b.push(d)}return 0==b.length?null:b};Pi.prototype.G=function(a){a=this.D(a);return null==a\|\|1>a.length?null:this.ea.G(a[0])};function Qi(){}Qi.prototype.H=function(){return"true, false"};Qi.prototype.D=function(a){return 0===a\|\|1===a?1===a:"true"=
2023-10-12 21:29:55 UTC	107	IN	Data Raw: 66 66 30 30 30 30 22 2c 72 6f 79 61 6c 62 6c 75 65 3a 22 23 34 31 36 39 65 31 22 2c 73 6b 79 62 6c 75 65 3a 22 23 38 37 63 65 65 62 22 2c 77 68 69 74 65 3a 22 23 66 66 66 66 66 66 22 2c 77 68 69 74 65 73 6d 6f 6b 65 3a 22 23 66 35 66 35 66 35 22 2c 79 65 6c 6c 6f 77 3a 22 23 66 66 66 66 30 30 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 69 28 61 29 7b 74 68 69 73 2e 68 64 3d 61 7d 59 69 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 41 20 68 65 78 61 64 65 63 69 6d 61 6c 20 63 6f 6c 6f 72 20 73 74 72 69 6e 67 22 3b 74 68 69 73 2e 68 64 26 26 28 61 2b 3d 22 20 6f 72 20 27 74 72 61 6e 73 70 61 72 65 6e 74 27 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 59 69 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ff0000",royalblue:"#4169e1",skyblue:"#87ceeb",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00"};function Yi(a){this.hd=a}Yi.prototype.H=function(){var a="A hexadecimal color string";this.hd&&(a+=" or 'transparent'");return a};Yi.prototype.D=function
2023-10-12 21:29:55 UTC	108	IN	Data Raw: 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 65 61 2e 47 28 61 5b 62 5d 29 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 5b 5d 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 2e 70 75 73 68 28 70 62 28 61 5b 63 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6a 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 62 3b 74 68 69 73 2e 59 63 3d 61 3b 74 68 69 73 2e 5a 63 3d 7b 7d 3b 66 6f 72 Data Ascii: b=0;b<a.length;b++){var c=this.ea.G(a[b]);if(null!=c)return c}return null};function bj(a){if("string"!==typeof a)return[];a=a.split(",");for(var b=[],c=0;c<a.length;c++)b.push(pb(a[c]));return b};function cj(a,b){b=void 0===b?0:b;this.Yc=a;this.Zc={};for
2023-10-12 21:29:55 UTC	109	IN	Data Raw: 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 3a 6e 75 6c 6c 7d 3b 6d 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 76 61 72 20 6e 6a 3d 6e 65 77 20 6d 6a 3b 76 61 72 20 6f 6a 3d 2f 5e 5b 30 2d 39 61 2d 7a 41 2d 5a 5d 2a 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 70 6a 28 29 7b 7d 70 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 70 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 41 20 73 74 79 6c 65 20 69 64 22 7d 3b 70 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 Data Ascii: n"string"===typeof a?a:null};mj.prototype.G=function(){return null};var nj=new mj;var oj=/^[0-9a-zA-Z]*$/;function pj(){}pj.prototype.G=function(){return null};pj.prototype.H=function(){return"A style id"};pj.prototype.D=function(a){return("string"===type
2023-10-12 21:29:55 UTC	111	IN	Data Raw: 7b 7d 2c 52 2e 66 6f 72 63 65 45 78 3d 7b 7d 2c 52 2e 67 63 73 63 3d 7b 7d 2c 52 2e 67 64 70 72 41 70 70 6c 69 65 73 3d 7b 7d 2c 52 2e 69 66 72 61 6d 65 48 65 69 67 68 74 43 61 6c 6c 62 61 63 6b 3d 7b 7d 2c 52 2e 6a 73 53 72 63 3d 7b 7d 2c 52 2e 6d 61 73 74 65 72 4e 75 6d 62 65 72 3d 7b 7d 2c 52 2e 6d 73 3d 7b 7d 2c 52 2e 6e 6f 41 64 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3d 7b 7d 2c 52 2e 6e 75 6d 62 65 72 3d 7b 7d 2c 52 2e 70 72 6f 70 65 72 74 79 43 6f 64 65 3d 7b 7d 2c 52 2e 70 75 62 49 64 3d 7b 7d 2c 52 2e 71 75 65 72 79 3d 7b 7d 2c 52 2e 72 6f 6c 65 3d 7b 7d 2c 52 2e 72 6f 77 6b 65 79 56 32 3d 7b 7d 2c 52 2e 73 62 73 69 67 6e 61 6c 73 3d 7b 7d 2c 52 2e 73 65 74 74 69 6e 67 73 49 64 3d 7b 7d 2c 52 2e 73 6c 61 76 65 4e 75 6d 62 65 72 3d 7b 7d 2c 52 Data Ascii: {},R.forceEx={},R.gcsc={},R.gdprApplies={},R.iframeHeightCallback={},R.jsSrc={},R.masterNumber={},R.ms={},R.noAdLoadedCallback={},R.number={},R.propertyCode={},R.pubId={},R.query={},R.role={},R.rowkeyV2={},R.sbsignals={},R.settingsId={},R.slaveNumber={},R
2023-10-12 21:29:55 UTC	112	IN	Data Raw: 30 7d 2c 53 2e 61 64 49 63 6f 6e 53 70 61 63 69 6e 67 42 65 6c 6f 77 3d 7b 67 3a 75 6a 2c 41 3a 21 30 7d 2c 53 2e 6c 69 6e 65 48 65 69 67 68 74 54 69 74 6c 65 3d 7b 67 3a 76 6a 2c 41 3a 21 30 7d 2c 53 2e 77 61 69 74 46 6f 72 41 64 73 3d 7b 67 3a 50 7d 2c 53 2e 68 65 69 67 68 74 43 6f 6e 73 74 72 61 69 6e 65 64 3d 0a 7b 67 3a 50 2c 63 61 3a 22 68 63 22 7d 2c 53 2e 77 69 64 74 68 3d 7b 67 3a 6c 6a 2c 63 61 3a 22 77 69 22 2c 43 3a 21 30 7d 2c 53 2e 61 74 74 72 69 62 75 74 69 6f 6e 53 70 61 63 69 6e 67 42 65 6c 6f 77 3d 7b 67 3a 6e 65 77 20 51 28 30 2c 34 30 29 2c 41 3a 21 30 7d 2c 53 2e 72 65 73 75 6c 74 73 50 61 67 65 42 61 73 65 55 72 6c 3d 7b 67 3a 73 6a 7d 2c 53 2e 63 6f 6c 75 6d 6e 73 3d 7b 67 3a 6e 65 77 20 51 28 31 2c 32 30 29 2c 61 61 3a 31 7d 2c 53 Data Ascii: 0},S.adIconSpacingBelow={g:uj,A:!0},S.lineHeightTitle={g:vj,A:!0},S.waitForAds={g:P},S.heightConstrained={g:P,ca:"hc"},S.width={g:lj,ca:"wi",C:!0},S.attributionSpacingBelow={g:new Q(0,40),A:!0},S.resultsPageBaseUrl={g:sj},S.columns={g:new Q(1,20),aa:1},S
2023-10-12 21:29:56 UTC	113	IN	Data Raw: 6a 2e 66 6f 6e 74 53 69 7a 65 54 69 74 6c 65 3d 7b 67 3a 65 65 2c 43 3a 21 30 2c 61 61 3a 31 38 7d 2c 44 6a 2e 66 6f 6e 74 53 69 7a 65 41 74 74 72 69 62 75 74 69 6f 6e 3d 7b 67 3a 65 65 2c 43 3a 21 30 2c 61 61 3a 31 33 7d 2c 44 6a 29 2c 54 3d 7b 7d 2c 46 6a 3d 28 54 2e 63 6f 6c 6f 72 41 64 53 65 70 61 72 61 74 6f 72 3d 7b 67 3a 5a 69 2c 41 3a 21 30 7d 2c 54 2e 72 6f 6c 6c 6f 76 65 72 41 64 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 7b 67 3a 24 69 2c 43 3a 21 30 7d 2c 54 2e 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 3d 7b 67 3a 24 69 2c 43 3a 21 30 7d 2c 54 2e 68 69 64 65 53 65 61 72 63 68 49 6e 70 75 74 42 6f 72 64 65 72 3d 7b 67 3a 50 7d 2c 54 2e 68 69 64 65 53 65 61 72 63 68 42 75 74 74 6f 6e 42 6f 72 64 65 72 3d 7b 67 3a 50 7d 2c 54 2e 63 6f 6c Data Ascii: j.fontSizeTitle={g:ee,C:!0,aa:18},Dj.fontSizeAttribution={g:ee,C:!0,aa:13},Dj),T={},Fj=(T.colorAdSeparator={g:Zi,A:!0},T.rolloverAdBackgroundColor={g:$i,C:!0},T.colorBackground={g:$i,C:!0},T.hideSearchInputBorder={g:P},T.hideSearchButtonBorder={g:P},T.col
2023-10-12 21:29:56 UTC	114	IN	Data Raw: 61 63 69 6e 67 3d 7b 67 3a 6e 65 77 20 51 28 32 2c 33 34 29 7d 2c 49 6a 2e 74 79 70 65 3d 7b 67 3a 6e 65 77 20 63 6a 28 5b 22 61 64 73 22 2c 22 72 65 6c 61 74 65 64 73 65 61 72 63 68 22 5d 29 7d 2c 49 6a 2e 66 6f 6e 74 53 69 7a 65 54 69 74 6c 65 3d 7b 67 3a 65 65 2c 43 3a 21 30 2c 41 3a 21 30 7d 2c 49 6a 2e 66 6f 6e 74 53 69 7a 65 41 74 74 72 69 62 75 74 69 6f 6e 3d 7b 67 3a 65 65 2c 43 3a 21 30 2c 41 3a 21 30 7d 2c 49 6a 2e 6c 69 6e 6b 54 61 72 67 65 74 3d 7b 67 3a 6e 65 77 20 63 6a 28 5b 22 5f 74 6f 70 22 2c 22 5f 62 6c 61 6e 6b 22 5d 29 2c 61 61 3a 22 5f 74 6f 70 22 2c 43 3a 21 30 7d 2c 49 6a 29 2c 4e 6a 3d 7b 7d 3b 6f 64 28 4e 6a 2c 79 6a 29 3b 6f 64 28 4e 6a 2c 7a 6a 29 3b 6f 64 28 4e 6a 2c 4d 6a 29 3b 70 64 28 4e 6a 2c 5b 22 71 75 65 72 79 22 2c 5b Data Ascii: acing={g:new Q(2,34)},Ij.type={g:new cj(["ads","relatedsearch"])},Ij.fontSizeTitle={g:ee,C:!0,A:!0},Ij.fontSizeAttribution={g:ee,C:!0,A:!0},Ij.linkTarget={g:new cj(["_top","_blank"]),aa:"_top",C:!0},Ij),Nj={};od(Nj,yj);od(Nj,zj);od(Nj,Mj);pd(Nj,["query",[
2023-10-12 21:29:56 UTC	116	IN	Data Raw: 63 28 29 3f 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 55 6a 3a 55 6a 28 29 29 3b 66 75 6e 63 74 69 6f 6e 20 56 6a 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 7b 7d 3a 62 3b 74 68 69 73 2e 45 61 3d 61 3b 74 68 69 73 2e 6d 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 42 64 3d 7b 7d 3b 74 68 69 73 2e 73 65 3d 30 3b 74 68 69 73 2e 4f 62 3d 6e 75 6c 6c 3b 76 61 72 20 63 3b 74 68 69 73 2e 74 69 6d 65 6f 75 74 4d 73 3d 6e 75 6c 6c 21 3d 28 63 3d 62 2e 74 69 6d 65 6f 75 74 4d 73 29 3f 63 3a 35 30 30 7d 73 61 28 56 6a 2c 70 67 29 3b 66 75 6e 63 74 69 6f 6e 20 57 6a 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 45 61 29 3f 76 6f 69 64 20 30 3a 62 2e 5f 5f 75 73 70 61 Data Ascii: c()?window.onload=Uj:Uj());function Vj(a,b){b=void 0===b?{}:b;this.Ea=a;this.ma=null;this.Bd={};this.se=0;this.Ob=null;var c;this.timeoutMs=null!=(c=b.timeoutMs)?c:500}sa(Vj,pg);function Wj(a){var b;return"function"===typeof(null==(b=a.Ea)?void 0:b.__uspa
2023-10-12 21:29:56 UTC	117	IN	Data Raw: 6c 7d 2c 22 67 43 41 44 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 6b 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 2e 75 73 70 53 74 72 69 6e 67 3f 63 2e 72 65 73 6f 6c 76 65 28 63 6b 28 64 2e 75 73 70 53 74 72 69 6e 67 29 29 3a 63 2e 72 65 73 6f 6c Data Ascii: l},"gCAD");function ak(a){function b(d){d&&"string"===typeof d.uspString?c.resolve(ck(d.uspString)):c.resol
2023-10-12 21:29:56 UTC	117	IN	Data Raw: 76 65 28 33 29 7d 76 61 72 20 63 3d 78 65 28 29 3b 74 72 79 7b 58 6a 28 61 2c 62 29 7d 63 61 74 63 68 28 64 29 7b 63 2e 72 65 73 6f 6c 76 65 28 36 29 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 55 53 50 20 72 65 74 75 72 6e 65 64 20 65 72 72 6f 72 20 73 74 61 74 75 73 3a 20 22 2b 64 29 7d 72 65 74 75 72 6e 20 63 2e 70 72 6f 6d 69 73 65 7d 66 75 6e 63 74 69 6f 6e 20 63 6b 28 61 29 7b 69 66 28 2f 5e 5b 31 2d 39 5d 5b 6e 79 4e 59 5c 2d 5d 5b 6e 79 4e 59 5d 5b 6e 79 4e 59 5c 2d 5d 24 2f 2e 74 65 73 74 28 61 29 29 7b 76 61 72 20 62 3d 61 2e 63 68 61 72 41 74 28 32 29 3b 69 66 28 2f 5e 59 7c 79 2f 2e 74 65 73 74 28 62 29 29 72 65 74 75 72 6e 20 32 3b 69 66 28 2f 5e 4e 7c 6e 2f 2e 74 65 73 74 28 62 29 29 72 65 74 75 72 6e 20 31 7d 69 66 28 22 31 2d 2d 2d 22 3d Data Ascii: ve(3)}var c=xe();try{Xj(a,b)}catch(d){c.resolve(6),console.warn("USP returned error status: "+d)}return c.promise}function ck(a){if(/^[1-9][nyNY\-][nyNY][nyNY\-]$/.test(a)){var b=a.charAt(2);if(/^Y\|y/.test(b))return 2;if(/^N\|n/.test(b))return 1}if("1---"=
2023-10-12 21:29:56 UTC	118	IN	Data Raw: 3b 69 66 28 30 3d 3d 3d 61 29 72 65 74 75 72 6e 20 77 2e 65 78 70 65 72 69 6d 65 6e 74 49 64 5f 3b 76 61 72 20 62 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 74 65 73 74 69 6e 67 44 61 74 61 5f 3f 74 65 73 74 69 6e 67 44 61 74 61 5f 2e 74 69 6d 65 49 64 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 63 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 74 65 73 74 69 6e 67 44 61 74 61 5f 3f 74 65 73 74 69 6e 67 44 61 74 61 5f 2e 6c 61 79 65 72 49 64 3a 0a 31 37 33 30 31 32 37 33 2c 64 3d 33 37 33 35 39 32 38 35 35 39 5e 63 3b 63 5e 3d 31 31 30 33 35 34 37 39 39 31 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 66 3d 62 2e 63 68 61 72 43 6f 64 Data Ascii: ;if(0===a)return w.experimentId_;var b="object"===typeof testingData_?testingData_.timeId:(new Date).getTime().toString(),c="object"===typeof testingData_?testingData_.layerId:17301273,d=3735928559^c;c^=1103547991;for(var e=0,f;e<b.length;e++)f=b.charCod
2023-10-12 21:29:56 UTC	119	IN	Data Raw: 69 73 2e 72 63 28 62 2c 66 2c 67 2c 68 29 7d 6d 3d 55 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 6d 2e 56 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 68 69 73 2e 4c 29 72 65 74 75 72 6e 22 6e 30 22 3b 76 61 72 20 62 3d 74 68 69 73 2e 7a 62 2c 63 3d 74 68 69 73 2e 79 62 2c 64 3d 74 68 69 73 2e 4c 61 3b 6e 75 6c 6c 21 3d 61 26 26 28 62 2b 3d 22 6d 69 6e 54 6f 70 22 69 6e 20 61 3f 61 2e 6d 69 6e 54 6f 70 3a 30 2c 63 2b 3d 22 6d 61 78 54 6f 70 22 69 6e 20 61 3f 61 2e 6d 61 78 54 6f 70 3a 30 2c 64 2b 3d 22 72 68 73 22 69 6e 20 61 3f 61 2e 72 68 73 3a 30 29 3b 69 66 28 63 26 26 62 3e 63 29 74 68 72 6f 77 20 4c 63 28 22 43 61 6e 6e 6f 74 20 72 65 71 75 65 73 74 20 6d 6f 72 65 20 6d 69 6e 54 6f 70 20 61 64 73 20 74 68 61 6e 20 6d 61 78 54 6f 70 2e 22 29 3b 72 Data Ascii: is.rc(b,f,g,h)}m=U.prototype;m.Vb=function(a){if(this.L)return"n0";var b=this.zb,c=this.yb,d=this.La;null!=a&&(b+="minTop"in a?a.minTop:0,c+="maxTop"in a?a.maxTop:0,d+="rhs"in a?a.rhs:0);if(c&&b>c)throw Lc("Cannot request more minTop ads than maxTop.");r
2023-10-12 21:29:56 UTC	121	IN	Data Raw: 70 72 41 70 70 6c 69 65 73 3d 21 31 29 3b 69 66 28 61 2e 75 73 50 72 69 76 61 63 79 29 7b 76 61 72 20 65 3d 63 6b 28 61 2e 75 73 50 72 69 76 61 63 79 29 3b 61 2e 63 70 70 3d 65 3b 32 3d 3d 3d 65 26 26 28 64 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 3d 21 31 29 7d 22 70 6c 61 73 22 3d 3d 61 2e 74 79 70 65 26 26 61 2e 73 74 79 6c 65 49 64 26 26 28 74 68 69 73 2e 49 2e 77 69 64 74 68 2e 77 63 3d 21 31 2c 74 68 69 73 2e 49 2e 68 65 69 67 68 74 2e 77 63 3d 21 31 29 3b 65 3d 70 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 49 29 29 3b 66 6f 72 28 76 61 72 20 66 3d 65 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 65 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 69 66 28 74 68 69 73 2e 49 5b 66 5d 2e 77 63 26 26 28 22 71 75 65 72 Data Ascii: prApplies=!1);if(a.usPrivacy){var e=ck(a.usPrivacy);a.cpp=e;2===e&&(d.personalizedAds=!1)}"plas"==a.type&&a.styleId&&(this.I.width.wc=!1,this.I.height.wc=!1);e=p(Object.keys(this.I));for(var f=e.next();!f.done;f=e.next()){f=f.value;if(this.I[f].wc&&("quer
2023-10-12 21:29:56 UTC	122	IN	Data Raw: 6f 70 22 3d 3d 61 2e 70 6f 73 69 74 69 6f 6e 26 26 28 64 2e 6d 61 78 54 6f 70 3d 61 2e 6e 75 6d 62 65 72 2c 64 2e 6e 75 6d 62 65 72 3d 6e 75 6c 6c 29 3b 64 2e 66 6f 72 6d 61 74 3d 74 68 69 73 2e 4c 3f 74 68 69 73 2e 54 28 64 29 3a 74 68 69 73 2e 59 62 28 64 2c 62 29 3b 74 68 69 73 2e 74 64 3d 64 2e 66 6f 72 6d 61 74 3b 64 2e 61 64 73 3d 74 68 69 73 2e 56 62 28 63 29 3b 64 2e 6e 6f 63 61 63 68 65 3d 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 45 33 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 44 61 74 65 2e 6e 6f 77 28 29 5d 2e 6a 6f 69 6e 28 22 22 29 3b 0a 64 2e 6e 75 6d 3d 22 30 22 3b 64 2e 6f 75 74 70 75 74 3d 74 68 69 73 2e 51 61 2e 69 62 28 29 3b 69 66 28 74 68 69 73 2e 51 61 2e 79 63 28 29 29 74 72 79 7b 64 2e 64 6f 6d 61 69 6e 4e 61 6d 65 7c 7c 28 64 Data Ascii: op"==a.position&&(d.maxTop=a.number,d.number=null);d.format=this.L?this.T(d):this.Yb(d,b);this.td=d.format;d.ads=this.Vb(c);d.nocache=[Math.floor(1E3*Math.random()),Date.now()].join("");d.num="0";d.output=this.Qa.ib();if(this.Qa.yc())try{d.domainName\|\|(d
2023-10-12 21:29:56 UTC	123	IN	Data Raw: 73 2e 73 6c 61 76 65 4e 75 6d 62 65 72 26 26 30 21 3d 64 2e 6f 70 74 69 6f 6e 73 2e 73 6c 61 76 65 4e 75 6d 62 65 72 26 26 65 2e 70 75 73 68 28 74 68 69 73 2e 79 61 28 64 2e 6f 70 74 69 6f 6e 73 2c 63 29 29 3b 72 65 74 75 72 6e 5b 62 2c 65 2e 6a 6f 69 6e 28 22 2d 22 29 5d 2e 6a 6f 69 6e 28 22 2d 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 6b 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6f 70 74 69 6f 6e 73 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 74 79 70 65 3f 22 73 65 61 72 63 68 62 6f 78 22 3d 3d 3d 61 2e 6f 70 74 69 6f 6e 73 2e 74 79 70 65 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 6b 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 62 3d 61 2e 6f 70 74 69 6f 6e 73 29 26 26 62 2e 74 79 70 65 3f 22 72 65 6c 61 74 65 64 73 65 61 72 63 68 22 Data Ascii: s.slaveNumber&&0!=d.options.slaveNumber&&e.push(this.ya(d.options,c));return[b,e.join("-")].join("-")};function ok(a){return a.options&&a.options.type?"searchbox"===a.options.type:!1}function pk(a){var b;return null!=(b=a.options)&&b.type?"relatedsearch"
2023-10-12 21:29:56 UTC	124	IN	Data Raw: 41 28 62 2c 22 70 73 68 22 2c 64 2e 68 65 69 67 68 74 29 3b 69 66 28 63 2e 74 6f 70 3d 3d 63 29 76 61 72 20 68 3d 30 3b 65 6c 73 65 7b 63 3d 63 2e 74 6f 70 3b 74 72 79 7b 76 61 72 20 6b 3b 69 66 28 6b 3d 21 21 63 26 26 6e 75 6c 6c 21 3d 63 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 75 64 28 63 2e 66 6f 6f 29 3b 6b 3d 21 30 3b 62 72 65 61 6b 20 62 7d 63 61 74 63 68 28 6c 29 7b 7d 6b 3d 21 31 7d 68 3d 6b 7d 63 61 74 63 68 28 6c 29 7b 68 3d 21 31 7d 68 3d 68 3f 31 3a 32 7d 41 28 62 2c 22 66 72 6d 22 2c 68 29 7d 41 28 62 2c 22 63 6c 22 2c 35 37 31 39 35 39 35 31 32 29 3b 41 28 62 2c 22 75 69 6f 22 2c 74 68 69 73 2e 4d 64 29 3b 41 28 62 2c 22 63 6f 6e 74 22 2c 74 68 69 73 2e 58 62 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e Data Ascii: A(b,"psh",d.height);if(c.top==c)var h=0;else{c=c.top;try{var k;if(k=!!c&&null!=c.location.href)b:{try{ud(c.foo);k=!0;break b}catch(l){}k=!1}h=k}catch(l){h=!1}h=h?1:2}A(b,"frm",h)}A(b,"cl",571959512);A(b,"uio",this.Md);A(b,"cont",this.Xb(this.options,this.
2023-10-12 21:29:56 UTC	125	IN	Data Raw: 73 74 65 72 4e 75 6d 62 65 72 29 3b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 2d 22 29 7d 3b 0a 6d 2e 70 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 7d 3b 65 2e 6e 61 6d 65 3d 62 3b 61 3d 63 2e 63 6f 6e 63 61 74 28 5b 61 5d 29 3b 62 3d 64 2e 63 6f 6e 63 61 74 28 5b 62 5d 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 3d 62 5b 64 5d 3b 76 61 72 20 66 3d 76 6f 69 64 20 30 2c 67 3d 61 5b 64 5d 2c 68 3d 74 68 69 73 2e 49 2c 6b 3d 7b 7d 3b 66 6f 72 28 66 20 69 6e 20 68 29 69 66 28 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 21 68 5b 66 5d 2e 7a 63 29 7b 76 61 72 20 6c 3d 67 5b 66 5d 2c 6e 3d 68 5b 66 5d 2e 61 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f Data Ascii: sterNumber);return a.join("-")};m.pc=function(a,b,c,d){var e={};e.name=b;a=c.concat([a]);b=d.concat([b]);for(d=0;d<a.length;d++){c=b[d];var f=void 0,g=a[d],h=this.I,k={};for(f in h)if(h.hasOwnProperty(f)&&!h[f].zc){var l=g[f],n=h[f].aa;"undefined"==typeo
2023-10-12 21:29:56 UTC	127	IN	Data Raw: 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3b 69 66 28 74 68 69 73 2e 48 61 26 26 21 62 7c 7c 21 74 68 69 73 2e 48 61 26 26 62 29 7b 74 68 69 73 2e 48 61 3d 62 3b 74 72 79 7b 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 22 2b 28 74 68 69 73 2e 48 61 3f 22 70 6f 72 74 72 61 69 74 22 3a 22 6c 61 6e 64 73 63 61 70 65 22 29 2c 22 2a 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 7d 3b 6d 2e 71 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 66 3d 74 68 69 73 2e 6e 63 28 61 2c 62 2c 63 2c 64 29 3b 74 68 69 73 2e 4c 7c 7c Data Ascii: b=function(a){var b=window.innerWidth<window.innerHeight;if(this.Ha&&!b\|\|!this.Ha&&b){this.Ha=b;try{a.contentWindow.postMessage("orientation:"+(this.Ha?"portrait":"landscape"),"*")}catch(c){}}};m.qc=function(a,b,c,d){var e=this,f=this.nc(a,b,c,d);this.L\|\|
2023-10-12 21:29:56 UTC	128	IN	Data Raw: 61 64 65 64 43 61 6c 6c 62 61 63 6b 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6e 6f 41 64 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 29 2c 61 3d 70 28 74 68 69 73 2e 6a 61 29 2c 0a 62 3d 61 2e 6e 65 78 74 28 29 3b 21 62 2e 64 6f 6e 65 3b 62 3d 61 2e 6e 65 78 74 28 29 29 62 2e 76 61 6c 75 65 2e 41 61 3d 74 68 69 73 2e 41 61 3b 69 66 28 21 74 68 69 73 2e 4c 29 7b 43 63 28 29 2e 63 6c 69 65 6e 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 75 62 49 64 3b 43 63 28 29 2e 47 62 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 49 64 7c 7c 22 22 3b 61 3d 5b 5d 3b 62 3d 5b 5d 3b 66 6f 72 28 63 3d 30 3b 63 3c 74 68 69 73 2e 56 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2e 70 75 73 68 28 74 68 69 73 2e 56 5b 63 5d 2e 46 28 29 29 2c 62 2e 70 75 73 68 28 74 68 69 Data Ascii: adedCallback,this.options.noAdLoadedCallback),a=p(this.ja),b=a.next();!b.done;b=a.next())b.value.Aa=this.Aa;if(!this.L){Cc().client=this.options.pubId;Cc().Gb=this.options.styleId\|\|"";a=[];b=[];for(c=0;c<this.V.length;c++)a.push(this.V[c].F()),b.push(thi
2023-10-12 21:29:56 UTC	129	IN	Data Raw: 65 6e 74 3d 22 22 3b 69 66 28 21 7a 28 22 5f 65 6e 61 62 6c 65 55 6e 69 66 69 65 64 4d 75 64 73 6b 69 70 70 65 72 49 66 72 61 6d 65 22 29 29 66 6f 72 28 66 3d 70 28 61 2e 6a 61 29 2c 67 3d 66 2e 6e 65 78 74 28 29 3b 21 67 2e 64 6f 6e 65 3b 67 3d 0a 66 2e 6e 65 78 74 28 29 29 67 2e 76 61 6c 75 65 2e 77 62 28 29 3b 61 2e 77 62 28 29 3b 62 2e 72 65 73 6f 6c 76 65 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 2c 22 63 49 5f 6d 41 22 29 3b 69 66 28 21 63 28 29 29 76 61 72 20 64 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 65 3d 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 28 29 29 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 3b 65 6c 73 65 20 69 66 28 36 45 34 3c 44 61 74 65 2e 6e 6f 77 28 29 2d 64 29 74 68 72 6f 77 Data Ascii: ent="";if(!z("_enableUnifiedMudskipperIframe"))for(f=p(a.ja),g=f.next();!g.done;g=f.next())g.value.wb();a.wb();b.resolve(a);return!0},"cI_mA");if(!c())var d=Date.now(),e=window.setInterval(function(){if(c())clearInterval(e);else if(6E4<Date.now()-d)throw
2023-10-12 21:29:56 UTC	130	IN	Data Raw: 74 69 6f 6e 73 2e 72 65 6c 61 74 65 64 53 65 61 72 63 68 55 73 65 52 65 73 75 6c 74 43 61 6c 6c 62 61 63 6b 26 26 66 26 26 46 28 64 2c 22 72 73 72 63 22 2c 68 64 2e 6a 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6b 2c 6c 29 7b 74 72 79 7b 66 28 6c 2e 71 2c 6c 2e 72 73 54 6f 6b 65 6e 29 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 29 3b 63 3d 70 28 74 68 69 73 2e 56 29 3b 66 6f 72 28 65 3d 63 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 63 2e 6e 65 78 74 28 29 29 65 3d 65 2e 76 61 6c 75 65 2e 46 28 29 2c 46 28 64 2c 65 2b 22 2e 68 41 22 2c 47 2e 6a 2c 78 6b 29 2c 46 28 64 2c 65 2b 22 2e 66 73 22 2c 68 64 2e 6a 2c 79 6b 29 2c 46 28 64 2c 65 2b 22 2e 61 43 22 2c 66 64 2e 6a 29 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 6b 28 61 2c 62 29 7b 61 2e 74 62 3d 62 3b 69 Data Ascii: tions.relatedSearchUseResultCallback&&f&&F(d,"rsrc",hd.j,function(g,h,k,l){try{f(l.q,l.rsToken)}catch(n){}});c=p(this.V);for(e=c.next();!e.done;e=c.next())e=e.value.F(),F(d,e+".hA",G.j,xk),F(d,e+".fs",hd.j,yk),F(d,e+".aC",fd.j)};function wk(a,b){a.tb=b;i
2023-10-12 21:29:56 UTC	132	IN	Data Raw: 64 2e 69 6e 76 61 6c 69 64 5f 73 74 79 6c 65 5f 69 64 3d 21 30 29 3b 74 68 69 73 2e 52 2e 63 61 66 52 65 71 75 65 73 74 41 63 63 65 70 74 65 64 3d 21 63 26 26 21 64 2e 6e 65 65 64 73 72 65 76 69 65 77 3b 74 68 69 73 2e 52 2e 63 61 66 53 74 61 74 75 73 3d 64 3b 74 72 79 7b 62 2e 6f 70 74 69 6f 6e 73 2e 70 61 67 65 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 52 2e 63 61 66 52 65 71 75 65 73 74 41 63 63 65 70 74 65 64 2c 64 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 7d 3b 0a 6d 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 61 62 29 7b 74 68 69 73 2e 61 62 3d 21 30 3b 69 66 28 7a 28 22 5f 65 6e 61 62 6c 65 55 6e 69 66 69 65 64 4d 75 64 73 6b 69 70 70 65 72 49 66 72 61 6d 65 22 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e Data Ascii: d.invalid_style_id=!0);this.R.cafRequestAccepted=!c&&!d.needsreview;this.R.cafStatus=d;try{b.options.pageLoadedCallback(this.R.cafRequestAccepted,d)}catch(h){}}};m.Ac=function(a){if(!this.ab){this.ab=!0;if(z("_enableUnifiedMudskipperIframe")){var b=this.
2023-10-12 21:29:56 UTC	133	IN	Data Raw: 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 64 2d 73 72 63 22 29 7d 2c 64 3d 66 63 28 22 6c 6c 72 6d 22 29 7c 7c 30 2c 65 3d 70 6b 28 61 29 3b 65 3d 7a 28 22 5f 65 6e 61 62 6c 65 4c 4c 49 44 4d 22 29 7c 7c 7a 28 22 5f 65 6e 61 62 6c 65 4c 4c 49 44 4d 52 53 4f 6e 6c 79 22 29 26 26 65 3b 66 6f 72 28 Data Ascii: removeAttribute("data-ad-src")},d=fc("llrm")\|\|0,e=pk(a);e=z("_enableLLIDM")\|\|z("_enableLLIDMRSOnly")&&e;for(
2023-10-12 21:29:56 UTC	133	IN	Data Raw: 76 61 72 20 66 3d 70 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 22 2b 62 29 29 2c 67 3d 66 2e 6e 65 78 74 28 29 3b 21 67 2e 64 6f 6e 65 3b 67 3d 66 2e 6e 65 78 74 28 29 29 69 66 28 67 3d 67 2e 76 61 6c 75 65 2c 6e 75 6c 6c 3d 3d 67 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 7c 7c 6e 65 28 67 2c 65 3f 64 3a 0a 30 29 29 7b 63 28 29 3b 72 65 74 75 72 6e 7d 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 22 2b 62 29 2c 6b 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 30 3c 72 2e 69 6e Data Ascii: var f=p(document.querySelectorAll("iframe"+b)),g=f.next();!g.done;g=f.next())if(g=g.value,null==g.offsetParent\|\|ne(g,e?d:0)){c();return}var h=document.querySelectorAll("iframe"+b),k=new IntersectionObserver(function(l){if(l.find(function(r){return 0<r.in
2023-10-12 21:29:56 UTC	134	IN	Data Raw: 3b 74 68 69 73 2e 64 64 3d 61 2e 56 61 3b 74 68 69 73 2e 53 63 28 64 2c 65 29 3b 69 66 28 21 74 68 69 73 2e 61 62 26 26 30 3c 65 29 7b 74 68 69 73 2e 4f 63 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 6d 64 3d 74 68 69 73 2e 61 62 3d 21 30 3b 74 68 69 73 2e 57 63 28 62 29 3b 76 61 72 20 66 3b 61 3d 6e 75 6c 6c 21 3d 28 66 3d 58 63 28 62 2c 63 2b 22 2e 65 56 22 29 29 3f 66 3a 76 6f 69 64 20 30 3b 63 2b 3d 22 2e 70 74 70 22 3b 69 66 28 62 3d 62 2e 42 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 3f 62 2e 42 5b 63 5d 2e 76 61 6c 75 65 3a 6e 75 6c 6c 29 74 68 69 73 2e 52 2e 74 65 72 6d 50 6f 73 69 74 69 6f 6e 73 3d 62 3b 69 66 28 7a 28 22 5f 65 6e 61 62 6c 65 55 6e 69 66 69 65 64 4d 75 64 73 6b 69 70 70 65 72 49 66 72 61 6d 65 22 29 29 7b 69 66 Data Ascii: ;this.dd=a.Va;this.Sc(d,e);if(!this.ab&&0<e){this.Oc=Date.now();this.md=this.ab=!0;this.Wc(b);var f;a=null!=(f=Xc(b,c+".eV"))?f:void 0;c+=".ptp";if(b=b.B.hasOwnProperty(c)?b.B[c].value:null)this.R.termPositions=b;if(z("_enableUnifiedMudskipperIframe")){if
2023-10-12 21:29:56 UTC	135	IN	Data Raw: 20 62 3d 70 61 72 73 65 49 6e 74 28 61 2c 31 30 29 3b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 62 29 26 26 30 3c 3d 62 3f 62 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 6b 28 61 29 7b 61 3d 70 61 72 73 65 49 6e 74 28 61 2c 31 30 29 3b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 61 29 26 26 30 3c 3d 61 7d 0a 76 61 72 20 6d 6b 3d 45 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 22 66 6f 6e 74 53 69 7a 65 54 69 74 6c 65 22 2c 22 66 6f 6e 74 53 69 7a 65 41 74 74 72 69 62 75 74 69 6f 6e 22 5d 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 61 5b 64 5d 29 7b 76 61 72 20 65 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: b=parseInt(a,10);return!isNaN(b)&&0<=b?b:null}catch(c){return null}}function tk(a){a=parseInt(a,10);return!isNaN(a)&&0<=a}var mk=E(function(a){for(var b=["fontSizeTitle","fontSizeAttribution"],c=0;c<b.length;c++){var d=b[c];if(a[d]){var e="string"==typ
2023-10-12 21:29:56 UTC	137	IN	Data Raw: 22 6e 75 6d 22 2c 5a 2e 6e 75 6d 52 65 70 65 61 74 65 64 3d 22 61 64 72 65 70 22 2c 5a 2e 6f 65 3d 22 6f 65 22 2c 5a 2e 6f 75 74 70 75 74 3d 22 6f 75 74 70 75 74 22 2c 5a 2e 70 72 65 6c 6f 61 64 3d 22 70 72 65 6c 6f 61 64 22 2c 5a 2e 70 72 69 63 65 43 75 72 72 65 6e 63 79 3d 22 70 66 63 72 6e 63 79 22 2c 5a 2e 70 72 69 63 65 4d 61 78 3d 22 70 66 6d 61 78 22 2c 5a 2e 70 72 69 63 65 4d 69 6e 3d 22 70 66 6d 69 6e 22 2c 5a 2e 70 75 62 49 64 3d 22 63 6c 69 65 6e 74 22 2c 5a 2e 71 75 65 72 79 3d 22 71 22 2c 5a 2e 71 75 65 72 79 43 6f 6e 74 65 78 74 3d 22 71 72 79 5f 63 74 78 74 22 2c 5a 2e 71 75 65 72 79 4c 69 6e 6b 3d 22 71 72 79 5f 6c 6e 6b 22 2c 5a 2e 72 65 66 65 72 65 72 3d 22 72 65 66 65 72 65 72 22 2c 5a 2e 72 6f 6c 65 3d 22 72 22 2c 5a 2e 72 6f 77 6b 65 Data Ascii: "num",Z.numRepeated="adrep",Z.oe="oe",Z.output="output",Z.preload="preload",Z.priceCurrency="pfcrncy",Z.priceMax="pfmax",Z.priceMin="pfmin",Z.pubId="client",Z.query="q",Z.queryContext="qry_ctxt",Z.queryLink="qry_lnk",Z.referer="referer",Z.role="r",Z.rowke
2023-10-12 21:29:56 UTC	138	IN	Data Raw: 74 79 70 65 2e 46 2c 22 67 46 4e 22 29 3b 6d 2e 70 63 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 70 63 2c 22 67 46 4e 41 4f 41 4a 22 29 3b 6d 2e 6e 63 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 63 2c 22 67 41 49 22 29 3b 6d 2e 52 62 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 52 62 2c 22 63 4f 22 29 3b 6d 2e 71 63 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 71 63 2c 22 69 41 49 22 29 3b 0a 6d 2e 46 63 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 46 63 2c 22 70 4d 22 29 3b 6d 2e 72 63 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 72 63 2c 22 69 22 29 3b 6d 2e 63 62 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 63 62 2c 22 63 49 22 29 3b 6d 2e 77 62 3d 42 28 55 2e 70 72 6f 74 6f 74 79 70 65 2e 77 62 2c 22 6d 41 22 29 3b 6d 2e 57 63 3d 42 28 55 2e 70 Data Ascii: type.F,"gFN");m.pc=B(U.prototype.pc,"gFNAOAJ");m.nc=B(U.prototype.nc,"gAI");m.Rb=B(U.prototype.Rb,"cO");m.qc=B(U.prototype.qc,"iAI");m.Fc=B(U.prototype.Fc,"pM");m.rc=B(U.prototype.rc,"i");m.cb=B(U.prototype.cb,"cI");m.wb=B(U.prototype.wb,"mA");m.Wc=B(U.p
2023-10-12 21:29:56 UTC	139	IN	Data Raw: 6e 65 77 20 50 69 28 5a 69 2c 35 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 6b 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 2c 6c 29 7b 6c 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 5b 5d 3a 6c 3b 55 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 76 6f 69 64 20 30 3d 3d 3d 6b 3f 31 3a 6b 2c 6c 29 7d 73 61 28 4d 6b 2c 55 29 3b 4d 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 74 65 78 74 43 6f 6c 6f 72 50 61 6c 65 74 74 65 29 7b 76 61 72 20 62 3d 61 2e 74 65 78 74 43 6f 6c 6f 72 50 61 6c 65 74 74 65 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 7c 7c 28 62 3d 5b 62 5d 29 3b 62 3d 67 65 28 22 74 65 78 74 43 6f 6c 6f 72 50 61 6c 65 74 74 65 22 2c 4c 6b 2c 62 29 3b 66 6f 72 Data Ascii: new Pi(Zi,5)};function Mk(a,b,c,d,e,f,g,h,k,l){l=void 0===l?[]:l;U.call(this,a,b,c,d,e,f,g,h,void 0===k?1:k,l)}sa(Mk,U);Mk.prototype.Od=function(a){if(a.textColorPalette){var b=a.textColorPalette;Array.isArray(b)\|\|(b=[b]);b=ge("textColorPalette",Lk,b);for
2023-10-12 21:29:56 UTC	140	IN	Data Raw: 65 3d 22 61 64 73 22 3b 6c 3d 55 3b 72 3d 62 2e 67 63 73 63 3f 6e 65 77 20 4a 6b 3a 6e 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 70 6c 61 73 22 3a 6c 3d 4d 6b 3b 72 3d 6e 65 77 20 4b 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 65 61 72 63 68 62 6f 78 22 3a 6c 3d 4f 6b 3b 72 3d 6e 3b 6e 3d 31 37 33 30 31 33 36 38 3d 3d 3d 67 6b 28 29 3b 76 61 72 20 71 3d 7a 28 22 5f 61 66 73 52 73 43 6f 6f 6b 69 65 6c 65 73 73 22 29 3b 69 66 28 6e 7c 7c 71 29 72 3d 6e 65 77 20 49 6b 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 4c 63 28 22 69 6e 76 61 6c 69 64 20 62 6c 6f 63 6b 20 74 79 70 65 3a 20 22 2b 62 2e 74 79 70 65 29 3b 7d 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 61 2c 62 2c 72 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7d 2c 0a 22 6e 41 42 22 29 3b Data Ascii: e="ads";l=U;r=b.gcsc?new Jk:n;break;case "plas":l=Mk;r=new Kk;break;case "searchbox":l=Ok;r=n;n=17301368===gk();var q=z("_afsRsCookieless");if(n\|\|q)r=new Ik;break;default:throw Lc("invalid block type: "+b.type);}return new l(a,b,r,c,d,e,f,g,h,k)},"nAB");
2023-10-12 21:29:56 UTC	141	IN	Data Raw: 63 2e 66 65 74 63 68 28 61 2c 62 29 29 3a 50 6b 28 63 2c 61 2c 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 2c 76 6f 69 64 20 30 3d 3d 3d 64 3f 21 31 3a 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 6b 28 61 29 7b 76 6f 69 64 20 30 21 3d 3d 61 2e 61 64 64 74 6c 43 6f 6e 73 65 6e 74 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 61 64 64 74 6c 43 6f 6e 73 65 6e 74 26 26 28 61 2e 61 64 64 74 6c 43 6f 6e 73 65 6e 74 3d 76 6f 69 64 20 30 29 3b 76 6f 69 64 20 30 21 3d 3d 61 2e 67 64 70 72 41 70 70 6c 69 65 73 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 67 64 70 72 41 70 70 6c 69 65 73 26 26 28 61 2e 67 64 70 72 41 70 70 6c 69 65 73 3d 76 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 2e 74 63 53 Data Ascii: c.fetch(a,b)):Pk(c,a,void 0===b?!1:b,void 0===d?!1:d)};function Sk(a){void 0!==a.addtlConsent&&"string"!==typeof a.addtlConsent&&(a.addtlConsent=void 0);void 0!==a.gdprApplies&&"boolean"!==typeof a.gdprApplies&&(a.gdprApplies=void 0);return void 0!==a.tcS
2023-10-12 21:29:56 UTC	143	IN	Data Raw: 2c 61 2e 6c 69 73 74 65 6e 65 72 49 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 55 6b 28 61 2c 62 2c 63 2c 64 29 7b 63 7c 7c 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 54 61 2e 5f 5f 74 63 66 61 70 69 29 61 3d 61 2e 54 61 2e 5f 5f 74 63 66 61 70 69 2c 61 28 62 2c 32 2c 63 2c 64 29 3b 65 6c 73 65 20 69 66 28 61 2e 43 61 28 29 29 7b 56 6b 28 61 29 3b 76 61 72 20 65 3d 2b 2b 61 2e 74 65 3b 61 2e 43 64 5b 65 5d 3d 63 3b 61 2e 6e 61 26 26 28 63 3d 7b 7d 2c 61 2e 6e 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 28 63 2e 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3d 7b 63 6f 6d 6d 61 6e 64 3a 62 2c 76 65 72 73 69 6f 6e 3a 32 2c 63 61 6c 6c 49 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 64 7d 2c 63 Data Ascii: ,a.listenerId)};function Uk(a,b,c,d){c\|\|(c=function(){});if("function"===typeof a.Ta.__tcfapi)a=a.Ta.__tcfapi,a(b,2,c,d);else if(a.Ca()){Vk(a);var e=++a.te;a.Cd[e]=c;a.na&&(c={},a.na.postMessage((c.__tcfapiCall={command:b,version:2,callId:e,parameter:d},c
2023-10-12 21:29:56 UTC	144	IN	Data Raw: 74 26 26 22 43 48 22 3d 3d 3d 61 2e 70 75 62 6c 69 73 68 65 72 43 43 3f 62 3d 21 30 3a 62 26 26 28 62 3d 61 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 2c 62 3d 21 28 21 62 7c 7c 21 62 5b 22 31 22 5d 29 29 29 3a 62 3d 21 30 3b 72 65 74 75 72 6e 20 62 3f 21 30 3a 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 4c 63 28 22 54 43 20 73 74 72 69 6e 67 20 6c 61 63 6b 73 20 70 75 72 70 6f 73 65 20 31 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 47 6f 6f 67 6c 65 20 28 47 56 4c 20 49 44 3a 20 37 35 35 29 2e 20 43 53 41 20 61 64 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 72 65 71 75 65 73 74 65 64 20 75 6e 74 69 6c 20 63 6f 6e 73 65 6e 74 20 69 73 20 67 69 76 65 6e 2e 20 54 43 20 73 74 72 69 6e 67 3a 20 22 2b 0a 61 2e 74 63 53 74 72 69 6e 67 29 29 2c 21 31 29 7d 0a 76 Data Ascii: t&&"CH"===a.publisherCC?b=!0:b&&(b=a.purpose.consents,b=!(!b\|\|!b["1"]))):b=!0;return b?!0:(console.warn(Lc("TC string lacks purpose 1 consent for Google (GVL ID: 755). CSA ads will not be requested until consent is given. TC string: "+a.tcString)),!1)}v
2023-10-12 21:29:56 UTC	145	IN	Data Raw: 65 3d 61 3b 74 68 69 73 2e 76 61 6c 75 65 3d 62 3b 74 68 69 73 2e 6c 63 3d 63 3b 74 68 69 73 2e 70 61 74 68 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 6e 75 6c 6c 3a 64 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 6e 75 6c 6c 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 61 6c 28 61 29 7b 74 68 69 73 2e 4a 3d 61 3b 74 68 69 73 2e 55 62 3d 30 3b 74 68 69 73 2e 47 64 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 62 6c 28 61 2c 62 29 7b 69 66 28 21 62 2e 6e 61 6d 65 7c 7c 21 62 2e 76 61 6c 75 65 7c 7c 21 62 2e 6c 63 29 74 68 72 6f 77 22 53 65 74 74 69 6e 67 20 61 20 63 6f 6f 6b 69 65 20 6d 75 73 74 20 69 6e 63 6c 75 64 65 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 61 6e 64 20 76 61 6c 75 65 20 61 6e 64 20 65 78 70 69 72 61 74 69 6f 6e 2e 22 3b 76 61 Data Ascii: e=a;this.value=b;this.lc=c;this.path=void 0===d?null:d;this.domain=void 0===e?null:e}function al(a){this.J=a;this.Ub=0;this.Gd=null}function bl(a,b){if(!b.name\|\|!b.value\|\|!b.lc)throw"Setting a cookie must include cookie name and value and expiration.";va
2023-10-12 21:29:56 UTC	146	IN	Data Raw: 7d 72 65 74 75 72 6e 20 32 3d 3d 3d 61 2e 55 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 6c 28 61 2c 62 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 4a 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 7b 76 61 72 20 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 22 3d 28 2e 2a 29 22 29 3b 69 66 28 61 3d 61 2e 4a 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 64 2e 6d 61 74 63 68 28 63 29 7d 29 29 72 65 74 75 72 6e 20 61 2e 6d 61 74 63 68 28 63 29 5b 31 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 6c 28 61 2c 62 29 7b 62 3d 7b 64 6f 6d 61 69 6e 3a 61 2e 4a 2e 6c 6f 63 61 74 69 6f 6e 2e Data Ascii: }return 2===a.Ub}function el(a,b){if("string"===typeof a.J.document.cookie){var c=new RegExp("^\\s"+b+"=(.)");if(a=a.J.document.cookie.split(";").find(function(d){return null!=d.match(c)}))return a.match(c)[1]}}function fl(a,b){b={domain:a.J.location.
2023-10-12 21:29:56 UTC	148	IN	Data Raw: 61 67 65 22 29 29 2c 68 3d 6e 75 6c 6c 3b 65 3d 7a 28 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 29 3b 76 61 72 20 6b 3d 6e 75 6c 6c 21 3d 64 5b 31 5d 26 26 62 3b 67 7c 7c 21 65 7c 7c 6b 7c 7c 28 68 3d 67 6c 28 6e 65 77 20 61 6c 28 63 29 29 29 3b 76 61 72 20 6c 3d 7b 64 61 3a 76 6f 69 64 20 30 2c 70 64 3a 76 6f 69 64 20 30 2c 74 63 53 74 72 69 6e 67 3a 76 6f 69 64 20 30 2c 67 64 70 72 41 70 70 6c 69 65 73 3a 76 6f 69 64 20 30 2c 59 3a 76 6f 69 64 20 30 2c 63 6f 6f 6b 69 65 3a 76 6f 69 64 20 30 7d 3b 67 7c 7c 21 65 7c 7c 6b 7c 7c 6a 6c 28 68 2c 6c 2c 61 29 3b 72 65 74 75 72 6e 20 64 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 7d 29 3f 6c 3a 41 65 28 64 29 2e 74 Data Ascii: age")),h=null;e=z("enableNonblockingSasCookie");var k=null!=d[1]&&b;g\|\|!e\|\|k\|\|(h=gl(new al(c)));var l={da:void 0,pd:void 0,tcString:void 0,gdprApplies:void 0,Y:void 0,cookie:void 0};g\|\|!e\|\|k\|\|jl(h,l,a);return d.every(function(n){return null==n})?l:Ae(d).t
2023-10-12 21:29:56 UTC	149	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 5b 61 5b 30 5d 5d 2e 63 6f 6e 63 61 74 28 61 5b 31 5d 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 30 29 7d 72 6c 3d 42 28 72 6c 2c 22 70 70 61 74 61 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 73 6c 28 61 29 7b 76 61 72 20 62 3d Data Ascii: instanceof Array?[a[0]].concat(a[1]):Array.prototype.slice.call(a,0)}rl=B(rl,"ppata");function sl(a){var b=
2023-10-12 21:29:56 UTC	149	IN	Data Raw: 21 6c 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 71 75 65 72 79 2c 63 3d 62 3f 22 72 65 6c 61 74 65 64 73 65 61 72 63 68 22 3a 22 61 64 73 22 3b 62 3d 62 3f 31 35 3a 35 3b 66 6f 72 28 76 61 72 20 64 3d 21 31 2c 65 3d 31 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 69 66 28 61 5b 65 5d 2e 74 79 70 65 3d 3d 63 29 7b 64 3d 21 30 3b 62 72 65 61 6b 7d 65 3d 5b 5d 3b 61 3d 70 28 61 29 3b 66 6f 72 28 76 61 72 20 66 3d 61 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 61 2e 6e 65 78 74 28 29 29 66 3d 66 2e 76 61 6c 75 65 2c 22 64 79 6e 61 6d 69 63 22 3d 3d 66 2e 74 79 70 65 3f 64 7c 7c 28 66 2e 74 79 70 65 3d 63 2c 66 2e 6e 75 6d 62 65 72 7c 7c 28 66 2e 6e 75 6d 62 65 72 3d 62 29 2c 65 2e 70 75 73 68 28 66 29 29 3a 65 2e 70 Data Ascii: !le(window.location.href).query,c=b?"relatedsearch":"ads";b=b?15:5;for(var d=!1,e=1;e<a.length;++e)if(a[e].type==c){d=!0;break}e=[];a=p(a);for(var f=a.next();!f.done;f=a.next())f=f.value,"dynamic"==f.type?d\|\|(f.type=c,f.number\|\|(f.number=b),e.push(f)):e.p
2023-10-12 21:29:56 UTC	150	IN	Data Raw: 28 73 29 20 77 65 72 65 20 69 67 6e 6f 72 65 64 20 64 75 65 20 74 6f 20 62 65 69 6e 67 20 6f 76 65 72 72 69 64 64 65 6e 20 62 79 20 6e 61 74 69 76 65 20 73 74 79 6c 65 20 63 6f 6e 74 72 6f 6c 73 3a 20 22 2b 0a 63 29 3b 63 3d 61 62 28 67 29 3b 30 3c 63 2e 6c 65 6e 67 74 68 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 43 53 41 20 6f 70 74 69 6f 6e 28 73 29 20 61 72 65 20 75 6e 73 75 70 70 6f 72 74 65 64 3a 20 22 2b 63 29 3b 63 3d 7b 7d 3b 28 64 3d 77 6c 28 65 2c 61 2e 44 63 2c 61 2e 4a 62 2c 64 2c 63 29 29 26 26 64 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 43 6b 28 6c 29 7d 29 3b 69 66 28 6f 63 28 29 29 7b 64 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 63 29 64 2e 70 75 73 68 28 6b 2e 72 65 70 Data Ascii: (s) were ignored due to being overridden by native style controls: "+c);c=ab(g);0<c.length&&console.warn("The following CSA option(s) are unsupported: "+c);c={};(d=wl(e,a.Dc,a.Jb,d,c))&&d.then(function(l){Ck(l)});if(oc()){d=[];for(var k in c)d.push(k.rep
2023-10-12 21:29:56 UTC	151	IN	Data Raw: 72 6f 6c 65 3d 22 73 22 2c 6c 2e 73 6c 61 76 65 4e 75 6d 62 65 72 3d 6b 2c 6c 2e 6d 61 73 74 65 72 4e 75 6d 62 65 72 3d 78 6c 2c 72 3d 73 6b 28 61 2c 6c 2c 64 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 31 2c 72 29 2c 66 2e 75 6e 73 68 69 66 74 28 72 2e 74 64 29 2c 67 2e 75 6e 73 68 69 66 74 28 72 29 2c 68 2e 6d 61 78 54 6f 70 2b 3d 72 2e 79 62 2c 68 2e 6d 69 6e 54 6f 70 2b 3d 72 2e 7a 62 2c 68 2e 72 68 73 2b 3d 72 2e 4c 61 2c 56 5b 72 2e 46 28 29 5d 3d 72 29 3b 6f 63 28 29 26 26 28 6c 2e 77 65 62 46 6f 6e 74 46 61 6d 69 6c 79 26 26 28 65 5b 6c 2e 77 65 62 46 6f 6e 74 46 61 6d 69 6c 79 5d 3d 21 30 29 2c 6c 2e 77 65 62 46 6f 6e 74 46 61 6d 69 6c 79 41 74 74 72 69 62 75 74 69 6f 6e 26 26 28 65 5b 6c 2e 77 65 62 46 Data Ascii: role="s",l.slaveNumber=k,l.masterNumber=xl,r=sk(a,l,d,void 0,void 0,void 0,void 0,1,r),f.unshift(r.td),g.unshift(r),h.maxTop+=r.yb,h.minTop+=r.zb,h.rhs+=r.La,V[r.F()]=r);oc()&&(l.webFontFamily&&(e[l.webFontFamily]=!0),l.webFontFamilyAttribution&&(e[l.webF
2023-10-12 21:29:56 UTC	153	IN	Data Raw: 72 6f 70 65 72 74 79 28 64 29 29 7b 76 61 72 20 65 3d 56 5b 64 5d 3b 65 2e 6f 70 74 69 6f 6e 73 26 26 65 2e 6f 70 74 69 6f 6e 73 2e 6d 61 73 74 65 72 4e 75 6d 62 65 72 3d 3d 62 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 26 26 28 65 3d 65 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 63 5b 65 5d 3d 28 63 5b 65 5d 7c 7c 30 29 2b 61 2e 42 5b 64 2b 22 2e 61 43 22 5d 2e 76 61 6c 75 65 29 7d 72 65 74 75 72 6e 20 63 7d 7a 6c 3d 42 28 7a 6c 2c 22 67 41 43 22 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 75 6b 28 61 2c 62 29 7b 76 61 72 20 63 3d 56 5b 22 6d 61 73 74 65 72 2d 22 2b 62 5d 3b 69 66 28 63 26 26 63 2e 6f 70 74 69 6f 6e 73 26 26 63 2e 6f 70 74 69 6f 6e 73 2e 61 64 73 52 65 73 70 6f Data Ascii: roperty(d)){var e=V[d];e.options&&e.options.masterNumber==b&&"string"==typeof e.options.container&&(e=e.options.container,c[e]=(c[e]\|\|0)+a.B[d+".aC"].value)}return c}zl=B(zl,"gAC");function uk(a,b){var c=V["master-"+b];if(c&&c.options&&c.options.adsRespo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.7	49716	72.247.100.147	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:56 UTC	154	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-10-12 21:29:56 UTC	154	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: Kestrel X-CID: 11 Cache-Control: public, max-age=143312 Date: Thu, 12 Oct 2023 21:29:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.7	49721	142.250.176.4	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-12 21:29:57 UTC	154	OUT	GET /afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2Cbucket069&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.dev-lti.bncollge.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%253D%253D&terms=Textbooks%2CCollege%20Textbooks&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2877560460752855&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=5141697146195625&num=0&output=afd_ads&domain_name=ww38.dev-lti.bncollge.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1697146195627&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&cl=571959512&uio=--&cont=tc&jsid=caf&nfp=1&jsv=571959512&rurl=http%3A%2F%2Fww38.dev-lti.bncollge.com%2F HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://ww38.dev-lti.bncollge.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA

Target ID:	0
Start time:	23:29:46
Start date:	12/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	23:29:48
Start date:	12/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2004,i,14725677100361710085,17135645198486768800,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:29:51
Start date:	12/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-lti.bncollge.com
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://ww38.dev-lti.bncollge.com/	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac...	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&s=d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_NHyy8KsGnyzIW4wxFm7YtvIeJDbDRuG1KSlsE2LJbX0wDlh7uqCpO0V5iQ6MBk8cWfIJ6-qQoIrSCWcduwt0x0HTG0rBKhg3sJSQDY4pzd-Bk9kB7e8L0sg77YwItQwafkmsBnzHhdgVjrhaCNW5SH-ik4mSbN4ZdAOFwW08UkUh0DwJzDu0prxI&cb=6ec4st8hf4il	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/bncollge.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_Above&traffic_type=TDFS&traffic_id=GDDY	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/bncollge.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_Above&traffic_type=TDFS&traffic_id=GDDY	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/true	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/true	HTTP Parser: No favicon
Source: https://www.afternic.com/legal#privacy_policy	HTTP Parser: No favicon
Source: https://www.afternic.com/legal#privacy_policy	HTTP Parser: No favicon
Source: https://www.afternic.com/legal#privacy_policy	HTTP Parser: No favicon
Source: https://sso.afternic.com/login?iframe=true&hide_create_account=true&hide_federation_login=true&status=2&app=afternic-v2&path=%2F&port=	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.134Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: dev-lti.bncollge.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2Cbucket069&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.dev-lti.bncollge.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%253D%253D&terms=Textbooks%2CCollege%20Textbooks&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2877560460752855&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=5141697146195625&num=0&output=afd_ads&domain_name=ww38.dev-lti.bncollge.com&v=3&bsl=8&pac=0&u_his=1&u_tz=120&dt=1697146195627&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&cl=571959512&uio=--&cont=tc&jsid=caf&nfp=1&jsv=571959512&rurl=http%3A%2F%2Fww38.dev-lti.bncollge.com%2F HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&s=d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_NHyy8KsGnyzIW4wxFm7YtvIeJDbDRuG1KSlsE2LJbX0wDlh7uqCpO0V5iQ6MBk8cWfIJ6-qQoIrSCWcduwt0x0HTG0rBKhg3sJSQDY4pzd-Bk9kB7e8L0sg77YwItQwafkmsBnzHhdgVjrhaCNW5SH-ik4mSbN4ZdAOFwW08UkUh0DwJzDu0prxI&cb=6ec4st8hf4il HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=lLirU0na9roYU3wDDisGJEVT HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&s=d4z8SUp2WJXP8hghz4TB_JiNENbyAmmjOXDbmkVz2Ge6B6DUc_D1L_WL7IXvm2uXeNGkvuuUKW6t_VVS0VezVZhDv6RP-1K1CCHzjH_NHyy8KsGnyzIW4wxFm7YtvIeJDbDRuG1KSlsE2LJbX0wDlh7uqCpO0V5iQ6MBk8cWfIJ6-qQoIrSCWcduwt0x0HTG0rBKhg3sJSQDY4pzd-Bk9kB7e8L0sg77YwItQwafkmsBnzHhdgVjrhaCNW5SH-ik4mSbN4ZdAOFwW08UkUh0DwJzDu0prxI&cb=6ec4st8hf4ilAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D1167268112%26pcsa%3Dfalse%26channel%3D000002%252Cbucket069%26client%3Ddp-teaminternet12_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjl8fHx8fHw2NTI4NjU1MjUyZGFlfHx8MTY5NzE0NjE5NC4zODE2fDhlNDhjNzMyMTE5MWE0YzY5NTgyMGQ3ZjRlMDdiZTE4NTFkZWFlOWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTVRKZk0zQm98YWQ3M2E5NjdiNGEzOThlOGUxN2Y0ODdkODQ0YWE3ZTU5YTMxNDFmZXwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI2NjgyOTg3ZmU5ZmIxZmVhOGU5NmIxOGM0YWNiN2NlNjcxMGEyM2J8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHwwfA%25253D%25253D%26terms%3DTextbooks%252CCollege%2520Textbooks%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2877560460752855%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%26format%3Dr3%257Cs%26nocache%3D5141697146195625%26num%3D0%26output%3Dafd_ads%26domain_name%3Dww38.dev-lti.bncollge.com%26v%3D3%26bsl%3D8%26pac%3D0%26u_his%3D1%26u_tz%3D120%26dt%3D1697146195627%26u_w%3D1280%26u_h%3D1024%26biw%3D1280%26bih%3D907%26psw%3D1280%26psh%3D789%26frm%3D0%26cl%3D571959512%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26nfp%3D1%26jsv%3D571959512%26rurl%3Dhttp%253A%252F%252Fww38.dev-lti.bncollge.com%252F&hl=en&q=EgRmgZFEGNXKoakGIjD5o0jjRuN-GtBtfaRdLscbD-ieb6gz3oa5FV7EjH9fpMViuoLEdbzyHPR8rMO-SbgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YZXA7hly1D+4YkO&MD=Yxv6RaK4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /embeddedservice/5.0/esw.min.js HTTP/1.1Host: service.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/gpl/afternic/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=gpl/afternic/202203181533&cb=1697146221846 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&_u=6GDAAUABAAAAACABIg~&z=564750678 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&gjid=2039886485&_gid=1786680911.1697146223&_u=6GDAAUABAAAAACABIg~&z=1932754328 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-115508484-1&cid=83553310.1697146223&jid=1188724621&_u=6GDAAUABAAAAACABIg~&z=564750678 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-07; NID=511=nNadqW9uTcY0OP6I3afnr71o6EzaYLsdpW4UEYN3vYq_rbRrNFxM1jozPGuhjORBZKKMz2tdDpVe7dNuTWp4CyK-zt5Is6wVElveWAfKQgwNJiKKtXHCCCmrlgzZTl5CiKjTeA2iQqf6zlRK2h8wg1hVpIsWsaKqaWJyHMPF3JA
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YZXA7hly1D+4YkO&MD=Yxv6RaK4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /@elastic/apm-rum@5.9.1/dist/bundles/elastic-apm-rum.umd.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.afternic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=65286552&token=b6682987fe9fb1fea8e96b18c4acb7ce6710a23b HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=bncollge.com&toggle=browserjs&uid=MTY5NzE0NjE5NC4zMzk1OmZlZGNhZjBmYjgxNzllMmMzNWQ1ZWEyNjcwYTUyZDk3ZTgwYWNhYWEyYTFlMGVmMzMzNzdhODgwNGM5NDNlYjI6NjUyODY1NTI1MmUxOA%3D%3D HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.dev-lti.bncollge.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=617ad5fca51cd422:T=1697146197:RT=1697146197:S=ALNI_MZICuw8GLxQCbpJeOoWcKCC1O8FSw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.dev-lti.bncollge.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=617ad5fca51cd422:T=1697146197:RT=1697146197:S=ALNI_MZICuw8GLxQCbpJeOoWcKCC1O8FSw

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dev-lti.bncollge.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Windows Analysis Report
https://dev-lti.bncollge.com