Edit tour

Windows Analysis Report
http://surveynuts.com

Overview

General Information

Sample URL:	http://surveynuts.com
Analysis ID:	1411159
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2840 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1972,i,598157843876950773,9708442485952587090,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6472 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://surveynuts.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: return b}uD.D="internal.enableAutoEventOnTimer";var wc=da(["data-gtm-yt-inspected-"]),vD=["www.youtube.com","www.youtube-nocookie.com"],wD,xD=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: surveynuts.com

Source: unknown

HTTP traffic detected: POST /reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D HTTP/1.1Host: nel.heroku.comConnection: keep-aliveContent-Length: 378Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CowboyReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778778&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=JiB0ci2MTSw7JbV%2FHXlMjTS2yFu9WP5QudzrT7nqv00%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778778&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=JiB0ci2MTSw7JbV%2FHXlMjTS2yFu9WP5QudzrT7nqv00%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Connection: closeDate: Mon, 18 Mar 2024 16:19:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 838X-Request-Id: baa13a99-5d77-47b5-886c-20d46e7a4b84X-Runtime: 0.003679Vary: Accept-EncodingStrict-Transport-Security: max-age=31536000Via: 1.1 vegur
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CowboyReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778809&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=029zi2EBqSL1cTHQOt1o8xsQPO6vCjgDOHrwYZGKU7E%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778809&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=029zi2EBqSL1cTHQOt1o8xsQPO6vCjgDOHrwYZGKU7E%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Connection: closeDate: Mon, 18 Mar 2024 16:20:09 GMTContent-Type: text/html; charset=utf-8Content-Length: 838X-Request-Id: edac4f6a-6ddd-4a49-98de-8ef07a7c7542X-Runtime: 0.003084Vary: Accept-EncodingStrict-Transport-Security: max-age=31536000Via: 1.1 vegur

Source: chromecache_84.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_84.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_84.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_84.2.dr	String found in binary or memory: http://chartjs.org/
Source: chromecache_84.2.dr	String found in binary or memory: http://codereview.stackexchange.com/q/13338
Source: chromecache_84.2.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_84.2.dr	String found in binary or memory: http://datatables.net/docs/DataTables/1.9.4/#$
Source: chromecache_84.2.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_84.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_84.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_84.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_84.2.dr, chromecache_100.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_84.2.dr	String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/
Source: chromecache_84.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_84.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_96.2.dr, chromecache_100.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_99.2.dr	String found in binary or memory: http://fonts.googleapis.com/css?family=Margarine
Source: chromecache_84.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_84.2.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_84.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_84.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_84.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_84.2.dr, chromecache_96.2.dr	String found in binary or memory: http://jqueryte.com/
Source: chromecache_84.2.dr, chromecache_96.2.dr	String found in binary or memory: http://jqueryte.com/about)
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/arraybuffer-to-string-apply-performance/2
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/converting-a-uint8array-to-a-string/2
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/diacritics/18
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_84.2.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_84.2.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_84.2.dr	String found in binary or memory: http://scaledinnovation.com/analytics/splines/aboutSplines.html
Source: chromecache_84.2.dr	String found in binary or memory: http://seclists.org/fulldisclosure/2009/Sep/394
Source: chromecache_84.2.dr	String found in binary or memory: http://semver.org/
Source: chromecache_84.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_84.2.dr	String found in binary or memory: http://stuartk.com/jszip
Source: chromecache_84.2.dr	String found in binary or memory: http://stuk.github.io/jszip/documentation/howto/read_zip.html
Source: chromecache_99.2.dr	String found in binary or memory: http://surveynuts.com
Source: chromecache_84.2.dr	String found in binary or memory: http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute
Source: chromecache_84.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_84.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_84.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_84.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/52/13.html
Source: chromecache_84.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/65/16.html
Source: chromecache_84.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/66/16.html
Source: chromecache_84.2.dr	String found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf
Source: chromecache_84.2.dr	String found in binary or memory: http://www.info-zip.org/FAQ.html#backslashes
Source: chromecache_84.2.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_84.2.dr	String found in binary or memory: http://www.paulirish.com/2011/requestanimationframe-for-smart-animating/
Source: chromecache_84.2.dr	String found in binary or memory: http://www.robertpenner.com/easing/
Source: chromecache_84.2.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_84.2.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_84.2.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/timers.html#dom-windowtimers-settimeout:
Source: chromecache_84.2.dr	String found in binary or memory: http://zlib.net/manual.html#Advanced
Source: chromecache_84.2.dr	String found in binary or memory: http://zlib.net/manual.html#Advanced)
Source: chromecache_129.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_129.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_84.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_84.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_84.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_84.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_84.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_129.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_100.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js
Source: chromecache_84.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_84.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_84.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_84.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_84.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators
Source: chromecache_84.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_84.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_84.2.dr	String found in binary or memory: https://dl.dropboxusercontent.com/u/34601363/toomuchscience.gif
Source: chromecache_84.2.dr	String found in binary or memory: https://dl.dropboxusercontent.com/u/34601363/yeahscience.gif
Source: chromecache_101.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_100.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Chivo
Source: chromecache_91.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins&display=swap
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_100.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_87.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_ekGrT.woff2)
Source: chromecache_87.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_en2rTJXg.woff2)
Source: chromecache_87.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_enmrTJXg.woff2)
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJbecmNE.woff2)
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_111.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_84.2.dr, chromecache_96.2.dr	String found in binary or memory: https://froala.com/wysiwyg-editor/terms/
Source: chromecache_84.2.dr	String found in binary or memory: https://gist.github.com/nnnick/696cc9c55f4b0beb8fe9
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/irakli-janiashvili
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nnnick/Chart.js/blob/master/LICENSE.md
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nodeca/pako/
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/noureddineme
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_129.2.dr	String found in binary or memory: https://google.com
Source: chromecache_129.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_129.2.dr	String found in binary or memory: https://googlesyndication.com
Source: chromecache_84.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_100.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://i.imgur.com/Qr6Nio7.png
Source: chromecache_129.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_129.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_84.2.dr	String found in binary or memory: https://raw.github.com/Stuk/jszip/master/LICENSE.markdown.
Source: chromecache_84.2.dr	String found in binary or memory: https://select2.github.io
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/images/arrow-down.svg
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/images/left-fade.svg
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/images/right-fade.svg
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/logo-sn-sq-bright-40.webp
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/logo-sn-trans1.png
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/phgrey.png
Source: chromecache_100.2.dr	String found in binary or memory: https://snuts.s3.amazonaws.com/img/squirrel-wy-30.png
Source: chromecache_100.2.dr	String found in binary or memory: https://static.filestackapi.com/filestack-js/3.x.x/filestack.min.js
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/ar
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/ar/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/ar/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/ar/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/ar/register
Source: chromecache_100.2.dr	String found in binary or memory: https://surveynuts.com/assets/application-0b33a79fd7542c6fd2fb34b2d9966cbace0eb7155459792ede240e38ca
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/bg
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/bg/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/bg/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/bg/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/bg/register
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/blogs
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/cs
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/cs/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/cs/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/cs/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/cs/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/de
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/de/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/de/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/de/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/de/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/el
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/el/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/el/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/el/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/el/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/en
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/en/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/en/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/en/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/en/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/es
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/es/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/es/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/es/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/es/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/fa
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/fa/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/fa/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/fa/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/fa/register
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/forgot_password
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/fr
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/fr/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/fr/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/fr/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/fr/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/he
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/he/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/he/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/he/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/he/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/hi
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/hi/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/hi/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/hi/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/hi/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/hu
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/hu/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/hu/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/hu/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/hu/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/id
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/id/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/id/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/id/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/id/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/it
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/it/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/it/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/it/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/it/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/ja
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/ja/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/ja/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/ja/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/ja/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/ko
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/ko/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/ko/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/ko/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/ko/register
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/login
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/lt
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/lt/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/lt/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/lt/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/lt/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/lv
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/lv/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/lv/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/lv/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/lv/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/nl
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/nl/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/nl/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/nl/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/nl/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/pl
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/pl/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/pl/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/pl/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/pl/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/pt
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/pt/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/pt/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/pt/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/pt/register
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/ro
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/ro/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/ro/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/ro/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/ro/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/ru
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/ru/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/ru/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/ru/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/ru/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/sr
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/sr/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/sr/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/sr/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/sr/register
Source: chromecache_100.2.dr	String found in binary or memory: https://surveynuts.com/surveys/take?id=256503&c=8208113FHTH&internalbot=yes
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/th
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/th/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/th/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/th/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/th/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/tr
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/tr/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/tr/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/tr/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/tr/register
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/v/6d64cd21
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/vi
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/vi/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/vi/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/vi/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/vi/register
Source: chromecache_127.2.dr	String found in binary or memory: https://surveynuts.com/zh-CN
Source: chromecache_103.2.dr	String found in binary or memory: https://surveynuts.com/zh-CN/blogs
Source: chromecache_91.2.dr	String found in binary or memory: https://surveynuts.com/zh-CN/forgot_password
Source: chromecache_93.2.dr	String found in binary or memory: https://surveynuts.com/zh-CN/login
Source: chromecache_133.2.dr	String found in binary or memory: https://surveynuts.com/zh-CN/register
Source: chromecache_129.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_84.2.dr, chromecache_96.2.dr	String found in binary or memory: https://www.froala.com/wysiwyg-editor)
Source: chromecache_129.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_80.2.dr, chromecache_98.2.dr, chromecache_102.2.dr, chromecache_122.2.dr, chromecache_124.2.dr, chromecache_79.2.dr, chromecache_131.2.dr, chromecache_107.2.dr, chromecache_110.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1047174163/?random
Source: chromecache_129.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_129.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_93.2.dr, chromecache_127.2.dr, chromecache_133.2.dr, chromecache_100.2.dr, chromecache_103.2.dr, chromecache_91.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-1047174163

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@28/106@40/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1972,i,598157843876950773,9708442485952587090,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://surveynuts.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1972,i,598157843876950773,9708442485952587090,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://surveynuts.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://in.getclicky.com/in.php?site_id=101089440&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=brm1p7	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=e54828	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=c8icu1	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=40au7m	0%	Avira URL Cloud	safe
http://jqueryte.com/about)	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=7yghdp	0%	Avira URL Cloud	safe
http://ejohn.org/blog/javascript-micro-templating/	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=101089440&href=%2Fen%2Flogin&title=Login%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=d8usse	0%	Avira URL Cloud	safe
http://www.robertpenner.com/easing/	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fv%2F6d64cd21&title=SN%20-%20Support%20Form&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=7tgydb	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=9bm5zi	0%	Avira URL Cloud	safe
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=93f6og	0%	Avira URL Cloud	safe
http://scaledinnovation.com/analytics/splines/aboutSplines.html	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
surveynuts.com	18.205.222.128	true	false	high
s3-w.us-east-1.amazonaws.com	54.231.230.225	true	false	high
static.getclicky.com	104.16.225.240	true	false	unknown
googleads.g.doubleclick.net	142.251.40.162	true	false	high
nel.heroku.com	52.55.185.246	true	false	high
in.getclicky.com	104.16.224.240	true	false	unknown
api.amplitude.com	44.237.140.36	true	false	high
cdn.amplitude.com	18.164.115.48	true	false	high
www.google.com	142.250.80.68	true	false	high
td.doubleclick.net	142.251.40.162	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
snuts.s3.amazonaws.com	unknown	unknown	false	high
static.filestackapi.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://in.getclicky.com/in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=40au7m	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/1047174163/?random=1710778818773&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXygxzz7pm9aHkyHhUiUzpG065ob-2Fg99DhsZWtzSNDN0WOG&random=188243884&rmt_tld=0&ipr=y	false		high
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fv%2F6d64cd21&title=SN%20-%20Support%20Form&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=7tgydb	false	Avira URL Cloud: safe	unknown
https://in.getclicky.com/in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=e54828	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/1047174163/?random=1710778761366&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOFqyPiw8C_fmiVSugVScwcUICePQxTuZmEGA8Gpw7yvxvAJu&random=2242437211&rmt_tld=0&ipr=y	false		high
https://surveynuts.com/en/login	false		high
https://surveynuts.com/	false		high
https://in.getclicky.com/in.php?site_id=101089440&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=brm1p7	false	Avira URL Cloud: safe	unknown
https://snuts.s3.amazonaws.com/img/squirrel-wy-30.png	false		high
https://www.google.com/pagead/1p-user-list/1047174163/?random=1710778801275&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqAMT_bA3oOkM3GwCxnzA2SfusC6yRHb8ZfkwkUt24RgFkpYEy&random=4272873945&rmt_tld=0&ipr=y	false		high
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=c8icu1	false	Avira URL Cloud: safe	unknown
https://in.getclicky.com/in.php?site_id=101089440&href=%2Fen%2Flogin&title=Login%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=d8usse	false	Avira URL Cloud: safe	unknown
https://in.getclicky.com/in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=7yghdp	false	Avira URL Cloud: safe	unknown
https://snuts.s3.amazonaws.com/img/logo-sn-sq-bright-40.webp	false		high
https://www.google.com/pagead/1p-user-list/1047174163/?random=1710778748156&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQcU_CcHJw9oJTkap3YFA6gcfmhHReQ&random=889736705&rmt_tld=0&ipr=y	false		high
https://surveynuts.com/snuts_favicon_new.ico	false		high
https://in.getclicky.com/in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=9bm5zi	false	Avira URL Cloud: safe	unknown
https://in.getclicky.com/in.php?site_id=100724983&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=93f6og	false	Avira URL Cloud: safe	unknown
https://surveynuts.com/en/register	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://surveynuts.com/ar/blogs	chromecache_103.2.dr	false		high
http://seclists.org/fulldisclosure/2009/Sep/394	chromecache_84.2.dr	false		high
https://surveynuts.com/vi	chromecache_127.2.dr	false		high
https://github.com/ebraminio	chromecache_84.2.dr	false		high
https://github.com/jonashdown	chromecache_84.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_84.2.dr	false		high
https://surveynuts.com/fa/forgot_password	chromecache_91.2.dr	false		high
https://www.froala.com/wysiwyg-editor)	chromecache_84.2.dr, chromecache_96.2.dr	false		high
http://codereview.stackexchange.com/q/13338	chromecache_84.2.dr	false		high
https://github.com/ryanhart2	chromecache_84.2.dr	false		high
https://surveynuts.com/es/login	chromecache_93.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_84.2.dr	false		high
https://github.com/vnathalye	chromecache_84.2.dr	false		high
https://surveynuts.com/lv/register	chromecache_133.2.dr	false		high
https://surveynuts.com/hu/register	chromecache_133.2.dr	false		high
https://github.com/narainsagar	chromecache_84.2.dr	false		high
http://www.datatables.net	chromecache_84.2.dr	false		high
https://github.com/ElFadiliY	chromecache_84.2.dr	false		high
https://github.com/jbleduigou	chromecache_84.2.dr	false		high
https://github.com/muminoff	chromecache_84.2.dr	false		high
https://github.com/hehachris	chromecache_84.2.dr	false		high
https://github.com/jarcoal	chromecache_84.2.dr	false		high
https://surveynuts.com/tr	chromecache_127.2.dr	false		high
https://github.com/andela-batolagbe	chromecache_84.2.dr	false		high
http://datatables.net/docs/DataTables/1.9.4/#$	chromecache_84.2.dr	false		high
https://github.com/bleadof	chromecache_84.2.dr	false		high
http://jsperf.com/diacritics/18	chromecache_84.2.dr	false		high
https://surveynuts.com/th	chromecache_127.2.dr	false		high
https://surveynuts.com/zh-CN/blogs	chromecache_103.2.dr	false		high
https://surveynuts.com/tr/register	chromecache_133.2.dr	false		high
https://surveynuts.com/sr	chromecache_127.2.dr	false		high
https://surveynuts.com/de/blogs	chromecache_103.2.dr	false		high
http://www.robertpenner.com/easing/	chromecache_84.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/suvash	chromecache_84.2.dr	false		high
https://github.com/andrewhood125	chromecache_84.2.dr	false		high
https://surveynuts.com/id/register	chromecache_133.2.dr	false		high
http://ejohn.org/blog/javascript-micro-templating/	chromecache_84.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/skakri	chromecache_84.2.dr	false		high
https://surveynuts.com/he/blogs	chromecache_103.2.dr	false		high
https://surveynuts.com/ro/login	chromecache_93.2.dr	false		high
https://github.com/jalex79	chromecache_84.2.dr	false		high
https://surveynuts.com/ru/blogs	chromecache_103.2.dr	false		high
https://github.com/kraz	chromecache_84.2.dr	false		high
https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators	chromecache_84.2.dr	false		high
https://surveynuts.com/vi/forgot_password	chromecache_91.2.dr	false		high
https://github.com/sampathsris	chromecache_84.2.dr	false		high
https://github.com/ulmus	chromecache_84.2.dr	false		high
https://surveynuts.com/ro	chromecache_127.2.dr	false		high
https://surveynuts.com/hi/login	chromecache_93.2.dr	false		high
http://datatables.net/license	chromecache_84.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_84.2.dr	false		high
https://surveynuts.com/tr/forgot_password	chromecache_91.2.dr	false		high
https://github.com/sedovsek	chromecache_84.2.dr	false		high
https://github.com/k2s	chromecache_84.2.dr	false		high
https://surveynuts.com/ru	chromecache_127.2.dr	false		high
https://surveynuts.com/sr/login	chromecache_93.2.dr	false		high
https://surveynuts.com/th/register	chromecache_133.2.dr	false		high
https://surveynuts.com/vi/blogs	chromecache_103.2.dr	false		high
https://github.com/chrisgedrim	chromecache_84.2.dr	false		high
https://surveynuts.com/lt/blogs	chromecache_103.2.dr	false		high
https://github.com/colindean	chromecache_84.2.dr	false		high
https://github.com/chriscartlidge	chromecache_84.2.dr	false		high
https://github.com/mechuwind	chromecache_84.2.dr	false		high
https://github.com/MadMG	chromecache_84.2.dr	false		high
https://surveynuts.com/el/login	chromecache_93.2.dr	false		high
https://github.com/fadsel	chromecache_84.2.dr	false		high
https://surveynuts.com/id/login	chromecache_93.2.dr	false		high
https://surveynuts.com/pl	chromecache_127.2.dr	false		high
http://jqueryte.com/about)	chromecache_84.2.dr, chromecache_96.2.dr	false	Avira URL Cloud: safe	unknown
http://www.info-zip.org/FAQ.html#backslashes	chromecache_84.2.dr	false		high
https://github.com/avaly	chromecache_84.2.dr	false		high
https://surveynuts.com/lv/blogs	chromecache_103.2.dr	false		high
https://surveynuts.com/hu/login	chromecache_93.2.dr	false		high
https://github.com/irakli-janiashvili	chromecache_84.2.dr	false		high
https://surveynuts.com/pt	chromecache_127.2.dr	false		high
http://scaledinnovation.com/analytics/splines/aboutSplines.html	chromecache_84.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/robgallen	chromecache_84.2.dr	false		high
https://surveynuts.com/nl/forgot_password	chromecache_91.2.dr	false		high
https://github.com/frontyard	chromecache_84.2.dr	false		high
https://surveynuts.com/th/blogs	chromecache_103.2.dr	false		high
https://surveynuts.com/nl/register	chromecache_133.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.68	www.google.com	United States	15169	GOOGLEUS	false
54.231.202.161	unknown	United States	16509	AMAZON-02US	false
44.238.198.87	unknown	United States	16509	AMAZON-02US	false
18.205.222.128	surveynuts.com	United States	14618	AMAZON-AESUS	false
18.164.115.48	cdn.amplitude.com	United States	3	MIT-GATEWAYSUS	false
54.161.241.46	unknown	United States	14618	AMAZON-AESUS	false
44.237.140.36	api.amplitude.com	United States	16509	AMAZON-02US	false
54.231.230.225	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.80.100	unknown	United States	15169	GOOGLEUS	false
104.16.224.240	in.getclicky.com	United States	13335	CLOUDFLARENETUS	false
44.224.37.210	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.16.225.240	static.getclicky.com	United States	13335	CLOUDFLARENETUS	false
52.34.230.154	unknown	United States	16509	AMAZON-02US	false
54.237.133.81	unknown	United States	14618	AMAZON-AESUS	false
52.55.185.246	nel.heroku.com	United States	14618	AMAZON-AESUS	false
142.251.40.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1411159
Start date and time:	2024-03-18 17:18:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://surveynuts.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@28/106@40/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://surveynuts.com/en/login Browse: https://surveynuts.com/en/register Browse: https://surveynuts.com/en/blogs Browse: https://surveynuts.com/v/6d64cd21 Browse: https://surveynuts.com/en Browse: https://surveynuts.com/en/register Browse: https://surveynuts.com/forgot_password Browse: https://surveynuts.com/en/blogs Browse: https://surveynuts.com/v/6d64cd21 Browse: https://surveynuts.com/en

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.195, 142.251.163.84, 142.250.65.238, 34.104.35.123, 172.217.165.131, 142.250.65.202, 142.250.176.200, 40.127.169.103, 23.206.121.50, 23.206.121.21, 23.206.121.13, 23.206.121.60, 23.206.121.10, 23.206.121.48, 23.206.121.53, 23.206.121.22, 142.251.40.106, 142.251.41.10, 142.251.40.202, 142.251.40.170, 142.251.40.138, 142.251.40.234, 142.250.64.74, 142.250.65.170, 142.250.81.234, 142.251.32.106, 142.250.72.106, 172.217.165.138, 142.251.35.170, 142.250.65.234, 142.250.64.106, 192.229.211.108, 20.3.187.198, 142.250.80.72, 151.101.2.133, 151.101.130.133, 151.101.66.133, 151.101.194.133, 20.166.126.56, 142.251.40.99, 142.250.65.195
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, d.sni.global.fastly.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://surveynuts.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32078)
Category:	downloaded
Size (bytes):	233532
Entropy (8bit):	5.471454190342195
Encrypted:	false
SSDEEP:	6144:3VizEOQD+iFa98Hr/xpnAKYqk+6xhdk3E94G:zOC+ijnAKhkJxha6
MD5:	53BF74311578B068EEEA8D9DACCBBFCF
SHA1:	818BB93D5328688D0DE76D8536E50EF5C2EFDFDC
SHA-256:	42F5A63AD4B2D16FE4151C278EE3E126D8DFE1348498182A451D378555F2562B
SHA-512:	C69212349FB50358EB9F0EF3260977432ED49D9BA8A7B9F3D414A12F014921EA375368EF2ADABD2F25A765C8E87D514F83F43EAB3A0BF112169EEC52440D05D0
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/v/6d64cd21
Preview:	...<!DOCTYPE html>.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">...<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.<meta name="description" content="">..<meta name="apple-mobile-web-app-capable" content="yes">.<meta name="apple-mobile-web-app-status-bar-style" content="black">.<meta name="viewport" content="user-scalable=no, width=device-width, initial-scale=1.0, maximum-scale=1.0">.<meta name="ROBOTS" content="NOINDEX">...<script src="https://static.filestackapi.com/filestack-js/3.x.x/filestack.min.js" type="text/javascript"></script>.<script>.//<![CDATA[.var filestack_client = filestack.init('AgcEw9ofRTUOpbjqmpOLFz', '', '');.// .</script>...<title>SN - Support Form</title>...<script>../! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery re

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64395)
Category:	downloaded
Size (bytes):	425708
Entropy (8bit):	5.362481844690512
Encrypted:	false
SSDEEP:	3072:pUMZVreqnasLXYYtLa323aJfUSXaLYnkVxrtxcDBebo2n64BCQKwB7IpD3w9lZLP:ptDLXYYJaBJRwbo2n/CHwB7IpDclZj
MD5:	92E0FE18116335AB1CF957FD740B4F85
SHA1:	18723EF4914A951B40B383D817927A81BBAB1ABA
SHA-256:	E5483E61C91765EE13814860C9E25AC457C45E17FE039E76817952908D42CD5E
SHA-512:	9E68A03B9639BA27B358C610A758BD7CBABB995A8F036AAF93F7292F09471796EDC9EDE7467362DA3001F5B56E5E08BDB58A7EAA298F8BA5C0CE107EDB9733E7
Malicious:	false
Reputation:	low
URL:	https://static.filestackapi.com/filestack-js/3.x.x/filestack.min.js
Preview:	/!. MIT License. * . * Copyright (c) 2020 Filestack. * . * Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. * . * The above copyright notice and this permission notice shall be included in all. * copies or substantial portions of the Software.. * . * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. * LIABILITY, WHETHER IN AN ACTION OF CONT

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2264), with no line terminators
Category:	downloaded
Size (bytes):	2264
Entropy (8bit):	5.8420191323893205
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08RAqLQM+12KCFQq6:wsbSUtJfxrqLWWWdV6j1NAKrFQP
MD5:	5D7EDA4EB6A748B427FEBDAC20060DFF
SHA1:	8BACE077D22468826D7AFAF330EBFFD53D3F092E
SHA-256:	2BA297CAC9802DBF101A03EEECC9703F6B98724F234BCBF362AABD65B5DB5933
SHA-512:	19CBC7ED22B32F90E8FDB04C8430114EB50B81098E448268E1BC2691EA109E896B2F0FEB1C5A8A38E2D22776142A9779F1AE02C51D59463A896B5388BD60A3CD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778761366&cv=11&fst=1710778761366&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (37486)
Category:	downloaded
Size (bytes):	79172
Entropy (8bit):	5.251811268748919
Encrypted:	false
SSDEEP:	1536:G6LFqIzozX73xOrpLde6sQkYphiwnsjP0Xs6HNTOJ48:G/x73IVdmQnphpnkcXsqK
MD5:	D279E07722E57729DA5E162D02363E00
SHA1:	08275BA0861D813FEB2FE33B2C7BB8E8AE5BA1B4
SHA-256:	7B6BAF4BFCD7C4CEBDAD1A0F39A29CFB8AE3F910A516753B0CC0DD263FFFFADE
SHA-512:	AB44BC05D969EBBDCB64D60533C3EE5DC8B911B4CA78F2CA6844775E8B2114E4400B939CC9AAF2A1EA9B90C9AD25A6B5C2C658F004AC63B59063F8BDF0BAE089
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/en/blogs
Preview:	<!DOCTYPE html>.<html>.<head>...<title>Blog about surveys, opinion polls and questionnaires \| SurveyNuts</title>.<meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" />...<script type="text/javascript">. var locale = "en";. locale = "en";. var locale_text = "English";. locale_text = "";. . window.I18n = {"date":{"formats":{"default":"%Y-%m-%d","short":"%b %d","long":"%B %d, %Y"},"day_names":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"abbr_day_names":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"month_names":[null,"January","February","March","April","May","June","July","August","September","October","November","December"],"abbr_month_names":[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"order":["year","month","day"]},"time":{"formats":{"default":"%a, %d %b %Y %H:%M:%S %z","short":"%d %b %H:%M","long":"%B %d, %Y %H:%M"},"am":"am","pm":"pm"},"support":{"array":{"words_connector":", "

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6352
Entropy (8bit):	7.184613109583996
Encrypted:	false
SSDEEP:	96:2rQDTvsvBy9nUKUvuoNUCr9dpNT0D5MdtbZPAVwzVw50Pv6YcxWTYox20xCxboa:jsvynUKUv/UCrrYNMtKwQqc6YoREhV
MD5:	D8E871924C91281D2CE476D8B3DF68D1
SHA1:	B4686CF83199BB9C7E39441A0EAF766C730886E7
SHA-256:	A3045E7D0BE16C17E6D4A080E0CA27FB974297473B2E2EB667BB66759E341F28
SHA-512:	0E375B12ED78456C105D90EB5C5ACEC9E96177A3C444E8AFD8790D41435F82D0CED62B56055E6EE0C0522EBAFFE8DB57916DE7B1BFD5F850D7B198919E7B9E25
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....8.........ICCP........appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt...P...#wtpt...t....rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin... ...>mmod...`...(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ.......0daDK.......FnlNL.......bfiFI.......xitIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW.......$viVN........skSK.......<zhCN.......$ruRU...$...RenGB.......vfrFR........ms..........hiIN........thTH........caES........enAU.......vesXL........deDE........enUS........ptBR........plPL......."elGR..."...4svSE.......VtrTR.......fptPT.......zjaJP.........L.C.D. .u. .b.o.j.i.... .L.C.D.F.a.r.g.e.-.L.C.D.L.C

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HSinYn:xY
MD5:	F7D59D3BE131AD16CC24D036112D9991
SHA1:	635B8DB4843997BA0331C4C0EDDD2601F4F69698
SHA-256:	57CCDE9F4BE6E3F510E37BEFB67BA272AB6D263980802EA18C18F3B78B3DAB32
SHA-512:	1446489C33DA980A237731A984D9FD017475CC0BA4C022DE45571A1AD4F295860717712DB60E6EA3E1F79ABB0C8EB7F1B15C5FB05E436D170E94B8740DFBF595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkSctl2JnmdvhIFDXhvEhk=?alt=proto
Preview:	CgkKBw14bxIZGgA=

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2266), with no line terminators
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.853686166342167
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08oAurLQzsxKn3H6:wsbSUtJfxrqLWWWdV6j18AQ3j
MD5:	AE93D6B6BED44CB249BDD88E343316DB
SHA1:	1EAE1E0CB6DBDC756CD1F63D63B6789FD3C530A2
SHA-256:	B95E27CDA6FEF0983184A9858106CBDDAC000FC089B510C4AF30E4E9E0E082B5
SHA-512:	D94067B7E86BC4833DDD500DA9FCFFF4131F17090EF9047C0D33DF66CB61BBBA1A3D720A806C9C3A9A8F8BCC2D084C0EFA995437DB3801B4F92891F51CC661B5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778807071&cv=11&fst=1710778807071&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2271), with no line terminators
Category:	downloaded
Size (bytes):	2271
Entropy (8bit):	5.843653162270584
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08vAlrLQ4nqP2Ke6:wsbSUtJfxrqLWWWdV6j1bA1bnK
MD5:	4EB542498D2273425DBD3CE202A98283
SHA1:	CA83EE9F70188B3B427C12B6C3083EB37B790647
SHA-256:	B65EE3ED0153C17C13B240ABC080EF8F9FDBA71A44991B720FDBC909A9C8F888
SHA-512:	0194C818F99C5B1646BF335C2F720417B37FDD6F97272791B06171821A4B032958B2F963246A4E9B94272409BFDAAD65AB3A65642E721CB2FAEA745171D97133
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778790961&cv=11&fst=1710778790961&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778818773&cv=11&fst=1710778818773&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13572, version 1.0
Category:	downloaded
Size (bytes):	13572
Entropy (8bit):	7.981927183907791
Encrypted:	false
SSDEEP:	192:ASffcJEH9BcBpURB1wFGXRLDimgXnY/ufS2dGU8yY3xCHt3JFyJXtL8PZsNALWYy:AXud0KMGXkzbDsUJx7mXtL0x7WtH2rPI
MD5:	3555A4E037B9C29022877836D5D74FF9
SHA1:	6AC06C68AFBB1B999FEDAD528BF25823133E1D2D
SHA-256:	73B56FD0A4EF8D88264DAE50745B1A84275C08551AB0022B3C6D045E4C9770D4
SHA-512:	B20F1C5F3AF01701228593CF027FA6CE029A011AD1780DA07E68D15E5B28A0E69C41C4591432A329A430DFDEAF619A7AD8F1DC9C74D5897D4B4E1447B3A43238
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_ekGrT.woff2
Preview:	wOF2......5.......\|$..4...........................F..V..f.`?STATH..n.....\....4..6.$..d. ..X. ....k..).......(.8...Q...5...%H9.6.Ka\| A.a...i..r8....V8,........M.y%..gz#ZPx....5.[jY. v..../S.<J....jg.8.5.(.....=....$bJ.......k.i..i....JZO-......1`+......(bS.a>..[.m...,...!.....y......pqaJ....@o').....\.3.0.:....D.Bx..tM.......Cv........N.N.{V.g.q$^...+...Z.....U]4.......7..+../..u...h.w8gNM.w....4.K../.&l..z........W6.....^V...wO:.yBw.A.=..lx.j.........iiA.......=....g....'0......}..p.......W.....r.#\X....&D/a9..(.y..5.@a.l..p....~_..4C.A.&.!......7.az/.q5...DD....".=.5Y..2P.@U.{..~.[..".)U..q.....C...x.L...+.$S.H.....DE..a.qr.x.A..@*T.T...j....2`.d.<0.H$tBZV...QB.RS....a0.,(..=..M..0../.sn..D..,.yp_7..m.I0.hG5.t...4..4.....K....~..o~.a_.R...l........._.6...qQ.V.^.!....g.'.......%...62.>...@.]y,l.0...D)D.,9.f-......z\|..N(..@.......&...u&..;......{......j.1.j.M..t....%.............1...M..wq...5....2.es......).3.e.R.YS)..-.S...K$.....@v..xO4]g..H.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2271), with no line terminators
Category:	downloaded
Size (bytes):	2271
Entropy (8bit):	5.852283723430566
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08EA7LQ4nqP2KJ6:wsbSUtJfxrqLWWWdV6j1oAvbn5
MD5:	747FC4BF5B6CBC56EF0F46C15976F562
SHA1:	7DF5C1B3DD7A0507EBCFBBDCE6D3F9020ED35534
SHA-256:	1D15125A6DB6C723B64C265CCC5CDF2FEC9AFB73A50D07155BB2A47256F12B17
SHA-512:	A22C9F1444FCE9CE0722513B7AFCE4F9F32F07216F9CFE49F4201FF3687163A8CCF95BCE6A2CFF201FC1D6B1F2E161DE2F93672C15D47DEA206E78D45235FC09
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778766485&cv=11&fst=1710778766485&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1132
Entropy (8bit):	5.353810972642406
Encrypted:	false
SSDEEP:	24:lPAOY7aZc++jAOY7aZc+6RVc+u/rAOY7aZc+wwy96DGSSf7:SOEaOAOEaOlRVc+ukOEaOrN0oD
MD5:	7565BB0CC93E3ECD600F2955C6FAE132
SHA1:	32123247665E155AB853127150C6BFA5536DA29A
SHA-256:	F159402A8B2ABF72C9CFEF886EFE2FC1ABE0E54A32394DD0680A9411CE07815D
SHA-512:	DC442367E3B6C0E93ADDEBAD0D072AA5B3B827150D3B5019785867F90A2C049ABE8D13402AE90BEF678E28FACBEDD722CD80DCE0752E882727A6C352EC2386D7
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Poppins&display=swap
Preview:	/* devanagari /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJbecmNE.woff2) format('woff2');. unicode-range: U+0900-097F, U+1CD0-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B09;.}./ latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+0

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.5301876989901
Encrypted:	false
SSDEEP:	3:0r7XashZNTsfMS1CYYn:0r7XaslsxC
MD5:	07F056B83315D494ADF372B568C21177
SHA1:	C2CFBC90FBD3DFA03F66B86E59E1A12B275AA41B
SHA-256:	7AFDB8B4D5E17706C3EA487137E361B98AF7088315D24896CD68C7D8F4B75F74
SHA-512:	484B186573F0AAE04D9D3C1C19A6A27C41CB5C1DE13B073A306A120A5ACACC0C2FA282CB5860993800F6A0D1278694E3960D7E38A5F5942C010AA7F98479D2D8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnwEl-kLnAwahIFDShLLYkSBQ3OQUx6?alt=proto
Preview:	CiAKEQ0oSy2JGgQICRgBGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778790961&cv=11&fst=1710778790961&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.007213741360957
Encrypted:	false
SSDEEP:	12:trV0OutJh2z+m/dbm4n0EAuoW7QTawEooaRp3uiHge:tZ0OutJ8z9/dbmtE7m/EooGRus
MD5:	2F7C63FFE11A294662BD0904B2621006
SHA1:	7E05D9AE6E7888149BCB934C23042D8DB0B6E3CE
SHA-256:	EA74AA7F382744325A179D061A774EDB12B06CBCC1B1014E7D9380C8A770B12D
SHA-512:	E4EE278FA35FD6B8CE1BA6F11E99B967B98A5D941A5C87388EC4EF50DC7FC01AFF9B3BA87AD75E45C01106BC58DB1A703654BDD2971ECA2C73804A65587EF2FF
Malicious:	false
Reputation:	low
Preview:	<svg width="12" height="13" viewBox="0 0 12 13" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_386_1491)">.<path d="M5.58027 9.6249L0.773833 4.78482C0.542023 4.55139 0.542023 4.17294 0.773833 3.93953L1.33443 3.37502C1.56584 3.14199 1.9409 3.14154 2.17286 3.37402L5.99999 7.20987L9.8271 3.37402C10.0591 3.14154 10.4341 3.14199 10.6655 3.37502L11.2261 3.93953C11.4579 4.17296 11.4579 4.55142 11.2261 4.78482L6.41971 9.6249C6.1879 9.8583 5.81208 9.8583 5.58027 9.6249Z" fill="#A5A5A5"/>.</g>.<defs>.<clipPath id="clip0_386_1491">.<rect width="12" height="12" fill="white" transform="translate(0 0.5)"/>.</clipPath>.</defs>.</svg>.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	710
Entropy (8bit):	7.58230179178686
Encrypted:	false
SSDEEP:	12:6v/7iMXrCr2b+ZX5cvZmNKFkpkOflciMIWHLS4niMs+FU2lp/7N7+DVNjX2e:sI2SZXkmYFkpjf+Nghcp/B+ee
MD5:	F78D5B0C3549614918E9A0CD1EA1C849
SHA1:	7BB7C95A2F9512B35997683BC79D15EDF4D69E27
SHA-256:	6A6A7F95D65878BDCD3CCA90D4ADEDC6E4FCFBE5346A1A545D06FA44B22898AD
SHA-512:	2C6A80DDA026C08C7CA065FC86819CF37C33D4CE10E7CE5E32099A44309215D9A372C5D31886938E81E4B0391B49DF06E2ED2307395596854159D18F570498D3
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/snuts_favicon_new.ico
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...hIDATx..W;K.A..;.o.H. ($.. b.&..&....E.......?@.....X[.. .....%..b........<C.n....{....o..a..G\|.x.I4.....[......d....6Ic...........8....Z]...0 X...\|B`..K..,o..>d......-..X.....p.@.S....\6.p..\|I2.N.cM.......7!x...[.!.......&j..s.....v.W..9..../.......vu.2.Ss.t..S.....,.^...`.&..H.==J=.U.p._..w...n....,...g.....V...5/...:<...Qg.......n..(/..5T...a..%.Y..<..I`L.U.S.....=b.1...N....2..........@7mD.C.JZ.x9....u+n...R..u3..3.M ... .yY..+..@K. ...2>......5.x,......}..j...^R`...T.y7.h.....X.UL}.QB^. .t5......]...:\|..fy...A"....s..>.;.m.D.U..%'........f<{....;L.m.K....e.a.m.kA.._...O...F..J.......IEND.B`.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Mar 29 23:33:31 2019, from Unix, original size modulo 2^32 55079
Category:	downloaded
Size (bytes):	17889
Entropy (8bit):	7.9880447064853515
Encrypted:	false
SSDEEP:	384:Xst1mYcJCJW0MB5AJXLh+nCig7Q/IYPVXJcd/mQoRC+UwGcj74w2hK:XrTt27+Bq+QGC+UwG8oK
MD5:	B568E7B3C9D94DA6A1D4845B18400F7A
SHA1:	E58022B19F4F38C0721C356057BD2311D08C49D6
SHA-256:	8F1FC46D5DDD2FA579F686AC25BCF5D6348B635127DEBC9A6A7B8643D850A60C
SHA-512:	74874E96D0D6C2D4CB3B3C17D4CFF9FE30C5C73E3E3A37ACDA361D5B27913ECA10E3BD7C250FABFA7387E15AEABAEAC064FA1C850BB91C663CA69D5F0200EC37
Malicious:	false
Reputation:	low
URL:	https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js
Preview:	....K..\...kw.H.0.....=.#.A.7."..I.....L.d.y....A"..%....U}S..qf.9.]+1R..........7]....\|........q.9N.."..B.WA.G........'>...zA...A.X7lM.M1.......'}......$ID.S....^..........P.uDQ.zP.H..:1.C..C_..../..................D ..Zl.....8..1.v.G.........E.lY...md#Cd....xP~...Y.Q.c..H.?P..[w.&.o.....]/...0.JSo...w....a.A<r KZ..X.8.B...+.z......G...g.G.U......^,...1 ...b?nL..!.......r...?...Y.f ...xH... .y}.-..z..Js.!.8.V.0..`.S.m..0.:........$...36.F0h...:.O..w...<.......;M.w....:.i.s..&@$o...3x...z.&.:...W.7.On...D3.._..%...v..b.....uM.~...5.5.N..H.As1.>!..`......X3/.D.!Bzj.8.n<r.....G....M..e..!).b@7.@/.kx..v..1.eE?zH..<. D.yBK.... ...>%a...w.u....u.....L..R3o...0.....K...._?........-..4`s.. .....x.......&.8.n......\...g.i.,_s...=i5.^x...f......nb.5.~;..L..a....m%P.c+P...1.T..O;...o.!...D1..5.J..M0L$.m.Y.".v_.sH.....-k.3^..&...9H.2.A>.....X..:....h.-.....x........oN...._..?;...O.........^.Ay..._7......Q.........v.{pxT}.h...P.....G

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778766485&cv=11&fst=1710778766485&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.8881377898343885
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CIo9kkSBMV4MVEjcKko8g1p:6v/lhPgIo9kkyXhcKwup
MD5:	C7C8D39F17E2A712E17248F5D3CBAB02
SHA1:	9CAA6B77F1DFA49BD7D95D3A54005C1BE01CFB33
SHA-256:	91985C6B5F16BF84F8E5FC6164B159292191721282D2888A382EA78D40DCA765
SHA-512:	289D331B2B16DCC4150098F8244BCB9DCE31A015F76DF4F00BE2405F7685B311863AC12B74268CDCE58EED0D6D6C235CF92A3F332E0CE6853E504C7AB5C68BAA
Malicious:	false
Reputation:	low
URL:	https://snuts.s3.amazonaws.com/img/phgrey.png
Preview:	.PNG........IHDR...............s....IDATx.c.:}..S.&M.<u.T.0...oA......IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	653
Entropy (8bit):	5.007213741360957
Encrypted:	false
SSDEEP:	12:trV0OutJh2z+m/dbm4n0EAuoW7QTawEooaRp3uiHge:tZ0OutJ8z9/dbmtE7m/EooGRus
MD5:	2F7C63FFE11A294662BD0904B2621006
SHA1:	7E05D9AE6E7888149BCB934C23042D8DB0B6E3CE
SHA-256:	EA74AA7F382744325A179D061A774EDB12B06CBCC1B1014E7D9380C8A770B12D
SHA-512:	E4EE278FA35FD6B8CE1BA6F11E99B967B98A5D941A5C87388EC4EF50DC7FC01AFF9B3BA87AD75E45C01106BC58DB1A703654BDD2971ECA2C73804A65587EF2FF
Malicious:	false
Reputation:	low
URL:	https://snuts.s3.amazonaws.com/img/images/arrow-down.svg
Preview:	<svg width="12" height="13" viewBox="0 0 12 13" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_386_1491)">.<path d="M5.58027 9.6249L0.773833 4.78482C0.542023 4.55139 0.542023 4.17294 0.773833 3.93953L1.33443 3.37502C1.56584 3.14199 1.9409 3.14154 2.17286 3.37402L5.99999 7.20987L9.8271 3.37402C10.0591 3.14154 10.4341 3.14199 10.6655 3.37502L11.2261 3.93953C11.4579 4.17296 11.4579 4.55142 11.2261 4.78482L6.41971 9.6249C6.1879 9.8583 5.81208 9.8583 5.58027 9.6249Z" fill="#A5A5A5"/>.</g>.<defs>.<clipPath id="clip0_386_1491">.<rect width="12" height="12" fill="white" transform="translate(0 0.5)"/>.</clipPath>.</defs>.</svg>.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5806
Entropy (8bit):	7.880758513070063
Encrypted:	false
SSDEEP:	96:CHaPysS76aUHiBzu+IGgzU55AiBnyL842P0rY33Z8ehS8xGJv7T+AzaewEmx5lIk:CmrDhm5AiBnoG08H/S8kJvXZaaix
MD5:	0E90A64446B5AA95A1C2F6C6C999B7E2
SHA1:	63494A91624C905141B1E0B720D3C1F4810BE0B3
SHA-256:	060B8E6047117F3898B9207B07DA81766DA62C98559931F8AA40A08DD9F4CA8A
SHA-512:	F243C392DE2148E8E226CF517465326FFE5804D60C05BF1396123E58D3563FA0B8A404431EF813025330C8B83521B45641D749A3316259A26062DEEFF9682C3B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0.....@iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w..!..J...b/........."...;bgQl....X.+oR@.}.{.}s.....sg......X..j..+....3.&.0HO..h..`.l..\|1+::..2.......Y{.A.....Z4..\|..H4.i.\|^......ybI..D.o>.@,..m....E2....2...{.6.l.[. .r......C.Q...j}.;..B.....}rs....Bl.m.....i?.d.M3mH........9@./..N.?..Kn.t.......X.a.nf......(.. . ...!F.....=j..g..]....0..!...D.+..ta..b.B...N<.z./....)m6J.b...t.....q%r.2_....,...L.G....e.'AL..P........qaJ.1E...A..4V.....Q..B.+L....Kr...m..r".x_Af\|."?X+.+.....,....u..c.......*.=....:.......8U.......9.2..b...8.X<...H.>.....W..eqC.....A8`....RX.@.......^x....\ ..@......$y..^.@..."...../...B...b.W....-....O ..a ..K.DC...c.....+.........w...p%#...P..$....!. .-n...^x8....3q..y\|.'<!t........&..I~.2.tA. e..~..n.5]q....Ce\.7.......}.gW..q...I.o3..i(.(N..2..G..y.....,.?.G.k.P..C=?.g..}>l.~...a....I.<v.k...8..aGexhu=...Ao..x.........,..NuN=N_.}....w4`.I.......".....q.........E..z.#.n .m.....}\|``..w..8.{.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2291), with no line terminators
Category:	downloaded
Size (bytes):	2291
Entropy (8bit):	5.843407420489596
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt084AQeLQ3BjrKHnk6:wsbSUtJfxrqLWWWdV6j1cAQeld
MD5:	06D7363ECCEAFC840C85D7EFC5AD7987
SHA1:	357AEE57828044C8093C0333A03BDF7C08B4D85D
SHA-256:	26163C0D11797EE854B0AE4DF0ECF490A71F7C486580C69617C1B0822D022A1B
SHA-512:	DCB53A45B49DDA6E395161B4CD9CC4F24ED0C7CFA20DA1F69FFF132D39DF358BA7AEA8CE7BA818B84EFD896E3E50C8768E05E8FC1901B155B0804F1F152D5092
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778818773&cv=11&fst=1710778818773&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.512814895472355
Encrypted:	false
SSDEEP:	3:4BNTsY3K8kCYYn:0saKC
MD5:	EE8745C56B8C239FBEA7DE3437B36E8F
SHA1:	9F47B6A35E1EC3BEEA1EE6B6276C81CDE958899E
SHA-256:	C3ECA3B89F4FE847C64D591A424ED3DEB744581F4B4F8B8CF258BA2A2B2A4167
SHA-512:	5E0EC6F8E0EA711A1313DA63AE4DBABB63942EEDBA6024E68EF67AA90C59CD540C09C57E8BDFDA8C0168135B52E2185E1758278C8C892D965706707722FCECF2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnD8oVGO1w5aRIFDeRPKjoSBQ3SL5TZ?alt=proto
Preview:	ChoKCw3kTyo6GgQIVhgCCgsN0i+U2RoECEsYAg==

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2266), with no line terminators
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.850060612459402
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08jADLQzsxK+F6:wsbSUtJfxrqLWWWdV6j1/AX3S
MD5:	9696698E6769707BF3EACC8B545CEC3A
SHA1:	B37110BEA22C07EE563D3395B80A98240A3931EA
SHA-256:	99B4D24066B9BCCB3C48180809B0F0CF6E2B3080DBD067A1BEBF0F50B3236D36
SHA-512:	18AB3B2006C5F12729CEEE7B8B919437BA6D1AB32B412116FCDF0922002EC0F9DE99AF63E0DB161BF3EDC130B7EB4C373FF8988CFA94A61B398AD04074F893EF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778775593&cv=11&fst=1710778775593&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.8881377898343885
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CIo9kkSBMV4MVEjcKko8g1p:6v/lhPgIo9kkyXhcKwup
MD5:	C7C8D39F17E2A712E17248F5D3CBAB02
SHA1:	9CAA6B77F1DFA49BD7D95D3A54005C1BE01CFB33
SHA-256:	91985C6B5F16BF84F8E5FC6164B159292191721282D2888A382EA78D40DCA765
SHA-512:	289D331B2B16DCC4150098F8244BCB9DCE31A015F76DF4F00BE2405F7685B311863AC12B74268CDCE58EED0D6D6C235CF92A3F332E0CE6853E504C7AB5C68BAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDATx.c.:}..S.&M.<u.T.0...oA......IEND.B`.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778807071&cv=11&fst=1710778807071&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (37486)
Category:	downloaded
Size (bytes):	77927
Entropy (8bit):	5.294974010186574
Encrypted:	false
SSDEEP:	1536:f6LFqIzozX73xOrpLde6sQkYphiwnOCP0Xs6HZpI9pw4nqJ4G:f/x73IVdmQnphpnBcXsQpI9G4s
MD5:	CB7A9668E23890AB1F0B730B426497C4
SHA1:	BA153CA4AAFEBB7159F552FDA4720765B6E7F216
SHA-256:	2C851DD57F6FC6098958A2E3FFA4829991080A5AD6685EF35F38354624AB4387
SHA-512:	46FE95F35C6A8F7CA74C9AE9D7A24802755E0FFE59B12128A00C015F12428F852C0180692571923AC8A6B0B2C40BB9D6846F57B228A5F3141BB2DC1AE3A1B740
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/en
Preview:	<!DOCTYPE html>.<html>.<head>...<title>Survey Maker, Free Online Questionnaire Creator</title>.<meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" />...<script type="text/javascript">. var locale = "en";. locale = "en";. var locale_text = "English";. locale_text = "";. . window.I18n = {"date":{"formats":{"default":"%Y-%m-%d","short":"%b %d","long":"%B %d, %Y"},"day_names":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"abbr_day_names":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"month_names":[null,"January","February","March","April","May","June","July","August","September","October","November","December"],"abbr_month_names":[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"order":["year","month","day"]},"time":{"formats":{"default":"%a, %d %b %Y %H:%M:%S %z","short":"%d %b %H:%M","long":"%B %d, %Y %H:%M"},"am":"am","pm":"pm"},"support":{"array":{"words_connector":", ","two_words_connec

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 670 x 131, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10819
Entropy (8bit):	7.8628032857635155
Encrypted:	false
SSDEEP:	192:/SDRbPMQXx/XJnscG+1z3NLLLc9fF5r1948eNcAadKpBNyvnoz2MyO:qyox/XJnsc5HAr1q8eGAadUXyv+2M7
MD5:	86A966453770FCADB464B7EB4368CA0F
SHA1:	5141E68D631498F4356FE79B40858226C5465562
SHA-256:	602128ED5DDCA025F2B83AA496FA4E4CFE2DF93A47AF653200CF7F08BCA53590
SHA-512:	BFF1C06254B02D359CFC320E2935F8711CD3DCF176473792372ACBE1497CD0CA96BDFDB54ECE1D9D89F6EB24EFC1E295DD253145489B2A363982D17835174373
Malicious:	false
Reputation:	low
URL:	https://snuts.s3.amazonaws.com/img/logo-sn-trans1.png
Preview:	.PNG........IHDR.............$.......pHYs.................sRGB.........gAMA......a...).IDATx...o.Y...s...77....$.L..l.....#..e...we..nd'{...eV.WA.nH^ei./0......2.......1.......LQ.OV.E....%V.X..S.y?..............................................................................................................................................................................................."p..h6..w.u.q.....v.....y...,..-..:_,\|.&.J...q....6.we..Q..RcyU)z...v..S.....Y..>.D...,..s.wK-.u......<.F.....j._K.XFa.Z.....o...........W..6...8.....}cmk.5~.4.u....A...,..D.....F.Mm.i...i.Rv.....N{;~._-..z.......z.............1....3._~x....KT...,.....g.p...o.%.k..ue...8..(.c..ake..x.X(v.......bSD.......:li..}.....=...6C...P0.xV..{s..`Ix..B.....E%.....TE..>...l=.:.2...`....t....Q..\|y.:.....)s..7n+c.X..a...2h..)>S..mEYR.......`.h.S....YtnQ..S.8....7..._..xd.[.k.M...[...+.Xn.....@. <..k...6h.(z("..g..w..................9.D....&...A..A.O...g.....'....2..9a$.rb..a.....

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2830)
Category:	downloaded
Size (bytes):	215131
Entropy (8bit):	5.530006026938474
Encrypted:	false
SSDEEP:	3072:s1TA13UsHOPgEtnXD8GUDp7Es0JtKh6xan21FLjLwgpRRHYtpbgfnBno0IW:mYHOgEtniJEs0Jo3gpRRHYtpcPBP
MD5:	E60ED448E546D20422415435FEA66277
SHA1:	3F01918EADC6E7640AB5252CDF2020B4502B0D66
SHA-256:	059B773F15DB11FF1150CD4E6F53EA5444115BACC155404CB7E7717D43B0862E
SHA-512:	F52403A5C51FFFB40B1CEA6A7C808BD33CBC1574202381D946D34AE156DBB7FAB133BDB1FE7C588220B26F67DA3D3849D91DC1DC9AEEAF3712E0E0E23ACBB361
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1047174163
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-1047174163","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ogt_conv_def","vtp_matchingRules":"[\"and\",[\"contains\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"success=yes\"],[\"startsWith\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"surveynuts.com\"]]","vtp_conversionLabel":"xpbzCJiguO4DEJO4qvMD","vtp_instanceDestinationId":"AW-1047174163","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__ogt_conv_def",[46,"a"],[52,"b",["require","internal.addHistoryChangeListener"]],[52,"c",["require","internal.evaluateMatchingRules"]],[52,"d",["require",

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5806
Entropy (8bit):	7.880758513070063
Encrypted:	false
SSDEEP:	96:CHaPysS76aUHiBzu+IGgzU55AiBnyL842P0rY33Z8ehS8xGJv7T+AzaewEmx5lIk:CmrDhm5AiBnoG08H/S8kJvXZaaix
MD5:	0E90A64446B5AA95A1C2F6C6C999B7E2
SHA1:	63494A91624C905141B1E0B720D3C1F4810BE0B3
SHA-256:	060B8E6047117F3898B9207B07DA81766DA62C98559931F8AA40A08DD9F4CA8A
SHA-512:	F243C392DE2148E8E226CF517465326FFE5804D60C05BF1396123E58D3563FA0B8A404431EF813025330C8B83521B45641D749A3316259A26062DEEFF9682C3B
Malicious:	false
Reputation:	low
URL:	https://snuts.s3.amazonaws.com/img/squirrel-wy-30.png
Preview:	.PNG........IHDR.............;0.....@iCCPICC Profile..H..W.XS...[R!...RBo....RBh.w..!..J...b/........."...;bgQl....X.+oR@.}.{.}s.....sg......X..j..+....3.&.0HO..h..`.l..\|1+::..2.......Y{.A.....Z4..\|..H4.i.\|^......ybI..D.o>.@,..m....E2....2...{.6.l.[. .r......C.Q...j}.;..B.....}rs....Bl.m.....i?.d.M3mH........9@./..N.?..Kn.t.......X.a.nf......(.. . ...!F.....=j..g..]....0..!...D.+..ta..b.B...N<.z./....)m6J.b...t.....q%r.2_....,...L.G....e.'AL..P........qaJ.1E...A..4V.....Q..B.+L....Kr...m..r".x_Af\|."?X+.+.....,....u..c.......*.=....:.......8U.......9.2..b...8.X<...H.>.....W..eqC.....A8`....RX.@.......^x....\ ..@......$y..^.@..."...../...B...b.W....-....O ..a ..K.DC...c.....+.........w...p%#...P..$....!. .-n...^x8....3q..y\|.'<!t........&..I~.2.tA. e..~..n.5]q....Ce\.7.......}.gW..q...I.o3..i(.(N..2..G..y.....,.?.G.k.P..C=?.g..}>l.~...a....I.<v.k...8..aGexhu=...Ao..x.........,..NuN=N_.}....w4`.I.......".....q.........E..z.#.n .m.....}\|``..w..8.{.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2326), with no line terminators
Category:	downloaded
Size (bytes):	2326
Entropy (8bit):	5.8453658340086685
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08gAYLQ+qtvV2KPH6:wsbSUtJfxrqLWWWdV6j1EAQH0O
MD5:	85E5FD72ADC761CD425045A670139633
SHA1:	13A7BAB15F46BE3BD64477936F5D2A180E11B7B5
SHA-256:	62D80FEEB15E2DFC5625F849DE3AF4464589ACE61DB3D0850690D1B9480B112E
SHA-512:	3D3643DBB1D3DDB3D192A012E8285B2354BDBE2BC85C6DED3B5121E654E70EA3266F18539FFD2776A3E1B111127EF293303FA672116B1D90B211CAA4A028DFF0
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778801275&cv=11&fst=1710778801275&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15091), with no line terminators
Category:	downloaded
Size (bytes):	15091
Entropy (8bit):	5.197525143186583
Encrypted:	false
SSDEEP:	192:S8GSTutObMJyPmhoKgT48ODC911GQNhSICsj67HfvZwhz4S/1KqkGwJ+:SaUHfoKgT48uQGQNw+4Hfihz4lqkB+
MD5:	292B0D1FC0FC39ED49F3BC793B4BF35A
SHA1:	F331140FAEDD5C3CF6046CAD8208B2651E5CBE7C
SHA-256:	B1FF344C29DFE132C4D5663981D939562A86BED8413984F812C02A6A3BAE80A4
SHA-512:	EAA0EC03B47C861F83732A0932D92CA82FF1FF6BA1F629F2B2FDB4C8A5B3057C5A5AAF769084433EDE286E9F7627BE36D83FFDECB78DBED5100AF126E0B428E5
Malicious:	false
Reputation:	low
URL:	https://static.getclicky.com/js
Preview:	var clicky_obj=clicky_obj\|\|(function(){var instance=null;function _ins(){var _self=this,site_ids=[],pageviews_fired=[],monitors=0,setup=0,ossassets=0,ossdata=0;this.domain='//in.getclicky.com';this.sitekeys=[];this.site_id_exists=function(site_id){for(var s in site_ids)if(site_ids[s]==site_id)return true;return false;};this.sitekey=function(site_id,key_only){if(_self.sitekeys&&_self.sitekeys[site_id])return(key_only?'':'&sitekey=')+_self.sitekeys[site_id];return'';};this.init=function(site_id){if(_self.site_id_exists(site_id))return;site_ids.push(site_id);if(clicky_custom.getHighEntropyValues&&navigator.userAgentData&&navigator.userAgentData.getHighEntropyValues){navigator.userAgentData.getHighEntropyValues(["model","platformVersion"]).then(function(ua){_self.he_model=ua.model;_self.he_platform=parseInt(ua.platformVersion);});}if(!setup){setup=1;setTimeout(_self.setup,200);}};this.setup=function(){if(location.hash.match(/^#_heatmap/))_self.heatmap();if(!_self.get_cookie('_first_pagevie

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (37486)
Category:	downloaded
Size (bytes):	59196
Entropy (8bit):	5.1584433847461675
Encrypted:	false
SSDEEP:	1536:W6LFqIzozX73xOrpLde6sQkYphiwnm5P0Xs6Hlpa1J48:W/x73IVdmQnphpngcXsUsh
MD5:	AC8319628BDC6B8AAA199FB63546BED8
SHA1:	F5C73722D40B716D270A8CFE88D5F43D997A0817
SHA-256:	7E6DB81C7900866EA4D87383B49827DE83E259BD8934855D70E6223420C2260F
SHA-512:	3A17FE278861194403DA819536796D783AA4AAD41B5A4292BD7E4C772DE8987653FB2976F19D890EDAA042103A1133351929588C4E7A05C10D5D7B9C60F8CA8B
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/en/register
Preview:	<!DOCTYPE html>.<html>.<head>...<title>Sign up to SurveyNuts</title>.<meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" />...<script type="text/javascript">. var locale = "en";. locale = "en";. var locale_text = "English";. locale_text = "";. . window.I18n = {"date":{"formats":{"default":"%Y-%m-%d","short":"%b %d","long":"%B %d, %Y"},"day_names":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"abbr_day_names":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"month_names":[null,"January","February","March","April","May","June","July","August","September","October","November","December"],"abbr_month_names":[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"order":["year","month","day"]},"time":{"formats":{"default":"%a, %d %b %Y %H:%M:%S %z","short":"%d %b %H:%M","long":"%B %d, %Y %H:%M"},"am":"am","pm":"pm"},"support":{"array":{"words_connector":", ","two_words_connector":" and ","last_word_co

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778801275&cv=11&fst=1710778801275&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/assets/fontawesome-webfont-1b6c2768e53b10ea9239f6e9827caf5f217a3a6cdee464151743ffffa7f636b7.woff2
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2234), with no line terminators
Category:	downloaded
Size (bytes):	2234
Entropy (8bit):	5.842043733703851
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08DAHLQ7KVI6:wsbSUtJfxrqLWWWdV6j1HAr/
MD5:	45FE074D1D1FEAB0509E402466FF7B75
SHA1:	F5CAB29A5DDB39981C6510BDC6E8C15E0129C88C
SHA-256:	066CC913F0602B4898355703E81369DDBF991D96365551FB273DB7AF20AB250D
SHA-512:	080584F48102FEC57AE50F086D0CF700854CA90101237C941BCE9E140EBE39AEB98B0FA5FFBBFC4EC2928154FC37FCEF1AB6638579A5A8EB291FED541C452466
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778796752&cv=11&fst=1710778796752&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&hn=www.googleadservices.com&frm=0&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2292), with no line terminators
Category:	downloaded
Size (bytes):	2292
Entropy (8bit):	5.8318284785168
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt084AsLQ3BjrKXDz6:wsbSUtJfxrqLWWWdV6j1kAUVi
MD5:	5937B0E2EA291EDAEF46C6B84FFE44F5
SHA1:	D50C7AE4041D302C7815B8D29CA68F7072783E62
SHA-256:	9479FD216195045351C534F4A3D58B1115ADA1703CA1E5EDEC7EEE550E69AE36
SHA-512:	A5DF46A3805BEAEF7996A0B1CCA23F92B553889E22A469299C5B71EEC019AD0BCD82BED78F0931DDD1E4D721EC6FEB385C007E890F79F2AE79949A87D2295EF9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778786727&cv=11&fst=1710778786727&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778796752&cv=11&fst=1710778796752&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&hn=www.googleadservices.com&frm=0&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	710
Entropy (8bit):	7.58230179178686
Encrypted:	false
SSDEEP:	12:6v/7iMXrCr2b+ZX5cvZmNKFkpkOflciMIWHLS4niMs+FU2lp/7N7+DVNjX2e:sI2SZXkmYFkpjf+Nghcp/B+ee
MD5:	F78D5B0C3549614918E9A0CD1EA1C849
SHA1:	7BB7C95A2F9512B35997683BC79D15EDF4D69E27
SHA-256:	6A6A7F95D65878BDCD3CCA90D4ADEDC6E4FCFBE5346A1A545D06FA44B22898AD
SHA-512:	2C6A80DDA026C08C7CA065FC86819CF37C33D4CE10E7CE5E32099A44309215D9A372C5D31886938E81E4B0391B49DF06E2ED2307395596854159D18F570498D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<...hIDATx..W;K.A..;.o.H. ($.. b.&..&....E.......?@.....X[.. .....%..b........<C.n....{....o..a..G\|.x.I4.....[......d....6Ic...........8....Z]...0 X...\|B`..K..,o..>d......-..X.....p.@.S....\6.p..\|I2.N.cM.......7!x...[.!.......&j..s.....v.W..9..../.......vu.2.Ss.t..S.....,.^...`.&..H.==J=.U.p._..w...n....,...g.....V...5/...:<...Qg.......n..(/..5T...a..%.Y..<..I`L.U.S.....=b.1...N....2..........@7mD.C.JZ.x9....u+n...R..u3..3.M ... .yY..+..@K. ...2>......5.x,......}..j...^R`...T.y7.h.....X.UL}.QB^. .t5......]...:\|..fy...A"....s..>.;.m.D.U..%'........f<{....;L.m.K....e.a.m.kA.._...O...F..J.......IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2544871
Entropy (8bit):	5.563358105723114
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAefEW9At8cM1Hzk1dlSmGv3ZxDwn7yiOjaQcctMcPQDlDXcp9:2/L/AbMVyvX3p
MD5:	EABE314D98329195E4492CEBA87CB0DB
SHA1:	F4E8E8232B099F690BDCD4B4D6377086E2DAFB6C
SHA-256:	2215E49A8F1D5C9FF42B4385DD583111434DF7B2CEF7EA2596CBCAD3B16A142D
SHA-512:	3893DF0396AA7E5612B677F593181AE69C154F27FF80B9AC1C850D059511BBAD73B448C4EBC00C77174419BEC5F39CC3D0A97195E89C811DE95474F8BDE2EE4F
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/assets/application-cfea3ad101535fe7f99c572035edbc2dabcf80d043e78c0d9719e3e655a37c42.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778786727&cv=11&fst=1710778786727&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 670 x 131, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10819
Entropy (8bit):	7.8628032857635155
Encrypted:	false
SSDEEP:	192:/SDRbPMQXx/XJnscG+1z3NLLLc9fF5r1948eNcAadKpBNyvnoz2MyO:qyox/XJnsc5HAr1q8eGAadUXyv+2M7
MD5:	86A966453770FCADB464B7EB4368CA0F
SHA1:	5141E68D631498F4356FE79B40858226C5465562
SHA-256:	602128ED5DDCA025F2B83AA496FA4E4CFE2DF93A47AF653200CF7F08BCA53590
SHA-512:	BFF1C06254B02D359CFC320E2935F8711CD3DCF176473792372ACBE1497CD0CA96BDFDB54ECE1D9D89F6EB24EFC1E295DD253145489B2A363982D17835174373
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............$.......pHYs.................sRGB.........gAMA......a...).IDATx...o.Y...s...77....$.L..l.....#..e...we..nd'{...eV.WA.nH^ei./0......2.......1.......LQ.OV.E....%V.X..S.y?..............................................................................................................................................................................................."p..h6..w.u.q.....v.....y...,..-..:_,\|.&.J...q....6.we..Q..RcyU)z...v..S.....Y..>.D...,..s.wK-.u......<.F.....j._K.XFa.Z.....o...........W..6...8.....}cmk.5~.4.u....A...,..D.....F.Mm.i...i.Rv.....N{;~._-..z.......z.............1....3._~x....KT...,.....g.p...o.%.k..ue...8..(.c..ake..x.X(v.......bSD.......:li..}.....=...6C...P0.xV..{s..`Ix..B.....E%.....TE..>...l=.:.2...`....t....Q..\|y.:.....)s..7n+c.X..a...2h..)>S..mEYR.......`.h.S....YtnQ..S.8....7..._..xd.[.k.M...[...+.Xn.....@. <..k...6h.(z("..g..w..................9.D....&...A..A.O...g.....'....2..9a$.rb..a.....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1140
Entropy (8bit):	5.433134412579329
Encrypted:	false
SSDEEP:	24:81/qOYsJvLAZzhqOYsJS9RVc+u/rqOYsJ5wy96DGSSf7:cyOLJiEOLJSRVc+uOOLJ5N0oD
MD5:	E2C39ADF038ABDA99B81E5D0D38F6A60
SHA1:	8C4D41766F4693691C5F34F9CF4AA0610ACC3671
SHA-256:	22E31E67A6404B645A3EED8759040DC38548404269D4C5A3DECB083D0343AF16
SHA-512:	33E32FB15C340DFE60BA37D14BF8C9744075346817714CF898BD28F3A3187BD7862BF8348EDC8A922AAAB8C547899B6F0A49E97228D8D6919EE47D19E6127C4E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Chivo
Preview:	/* vietnamese /.@font-face {. font-family: 'Chivo';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_en2rTJXg.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Chivo';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_enmrTJXg.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Chivo';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9b4kzIxd1KFppkaRKvDRPJVDf_vB_ekGrT.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-0

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2273), with no line terminators
Category:	downloaded
Size (bytes):	2273
Entropy (8bit):	5.827377493161608
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt081AQLQ3BjrlcIH6:wsbSUtJfxrqLWWWdV6j1xAoys
MD5:	FB9E29B8FD38F4D9ED30D0840D485E30
SHA1:	404A870B56B6060D5D2F97F1BF9CC1DE98B6A7B9
SHA-256:	DB074CCF2BF922A49E13AB086BBD553925F826A3D6BCD9CEEFEF1292F155C13A
SHA-512:	B16A13A814077F7FCEFE584C9CE427B51F1CA529C17DFC8BA583B43CEB40C75894BD38ECC09C8B5A425741D8D51CB326C3C3DF09A205C7AA53EDCDB090834D12
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778748156&cv=11&fst=1710778748156&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778748156&cv=11&fst=1710778748156&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778770484&cv=11&fst=1710778770484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (37486)
Category:	downloaded
Size (bytes):	70652
Entropy (8bit):	5.241186302458407
Encrypted:	false
SSDEEP:	1536:d6LFqIzozX73xOrpLde6sQkYphiwnkyP0Xs6HnKJ48:d/x73IVdmQnphpnFcXsN
MD5:	A940A3F0F879FF2657CB604B0C90878C
SHA1:	AE14C0148D5910147B1110E529466E87F96A08DA
SHA-256:	09EA8D4D9D876EF95E868CCF7997E3B5363ABD60D7736288A118E7751DF4DB1E
SHA-512:	D8B0DB9B5FB077F5EF740C1432349E1871BD642B26A07B3E0C588AF46BFAAA01E14360B44C2CACA4126508A4AD92A728A44B4B07E52DA9B6033C041A39A9FC4D
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/forgot_password
Preview:	<!DOCTYPE html>.<html>.<head>...<title></title>.<meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" />...<script type="text/javascript">. var locale = "en";. locale = "en";. var locale_text = "English";. locale_text = "";. . window.I18n = {"date":{"formats":{"default":"%Y-%m-%d","short":"%b %d","long":"%B %d, %Y"},"day_names":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"abbr_day_names":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"month_names":[null,"January","February","March","April","May","June","July","August","September","October","November","December"],"abbr_month_names":[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"order":["year","month","day"]},"time":{"formats":{"default":"%a, %d %b %Y %H:%M:%S %z","short":"%d %b %H:%M","long":"%B %d, %Y %H:%M"},"am":"am","pm":"pm"},"support":{"array":{"words_connector":", ","two_words_connector":" and ","last_word_connector":", and "}},"

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.187326145256008
Encrypted:	false
SSDEEP:	3:mSfeSHq/ZYn:mSfVq/ZYn
MD5:	138575713527D7423F3B35EB3843D3DA
SHA1:	C0A962DF7A668FD30A0376699E0E55F76C4C76BE
SHA-256:	E4785021E34FE8365155AC296A621618B7D6CBB1C75A74E13E473F632BB733A7
SHA-512:	D11FBADDC5BE586A7F35982F9ACE37A5FA043B611349D6D7FB60A0BAB2EB8F2F2F6C0F7C4B6C7C8D0344D3CBBB7BB25F5EDA8BCEEC8CED671106628DF5F0EE58
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgla9sRzl6scohIFDQbtu_8SBQ0G7bv_EgUNkWGVTg==?alt=proto
Preview:	ChsKBw0G7bv/GgAKBw0G7bv/GgAKBw2RYZVOGgA=

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (37486)
Category:	downloaded
Size (bytes):	71195
Entropy (8bit):	5.245948094605632
Encrypted:	false
SSDEEP:	1536:d6LFqIzozX73xOrpLde6sQkYphiwn8fP0Xs6HEG6J48:d/x73IVdmQnphpnicXsjN
MD5:	3EF331A92745EB03B898C74D7DBF28B7
SHA1:	8305B272D033932CC7F03FB04F174D2D441F7353
SHA-256:	B1E40697DDEB6BD939925A39DED4EB7FD5538D3DED0F753810E10FBFCBAE7BCF
SHA-512:	E8A65310D09219A08C0C2C56F54D0FBF28BDAEBC6893CA989E2F37F2DD46E9F2F173BE74FE087BB290F57F5F01BB9B7D2B7FD7A5EE5B42EED5363314DA79E84B
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/en/login
Preview:	<!DOCTYPE html>.<html>.<head>...<title>Login to SurveyNuts</title>.<meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" />...<script type="text/javascript">. var locale = "en";. locale = "en";. var locale_text = "English";. locale_text = "";. . window.I18n = {"date":{"formats":{"default":"%Y-%m-%d","short":"%b %d","long":"%B %d, %Y"},"day_names":["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"abbr_day_names":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"month_names":[null,"January","February","March","April","May","June","July","August","September","October","November","December"],"abbr_month_names":[null,"Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"order":["year","month","day"]},"time":{"formats":{"default":"%a, %d %b %Y %H:%M:%S %z","short":"%d %b %H:%M","long":"%B %d, %Y %H:%M"},"am":"am","pm":"pm"},"support":{"array":{"words_connector":", ","two_words_connector":" and ","last_word_conn

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778761366&cv=11&fst=1710778761366&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6352
Entropy (8bit):	7.184613109583996
Encrypted:	false
SSDEEP:	96:2rQDTvsvBy9nUKUvuoNUCr9dpNT0D5MdtbZPAVwzVw50Pv6YcxWTYox20xCxboa:jsvynUKUv/UCrrYNMtKwQqc6YoREhV
MD5:	D8E871924C91281D2CE476D8B3DF68D1
SHA1:	B4686CF83199BB9C7E39441A0EAF766C730886E7
SHA-256:	A3045E7D0BE16C17E6D4A080E0CA27FB974297473B2E2EB667BB66759E341F28
SHA-512:	0E375B12ED78456C105D90EB5C5ACEC9E96177A3C444E8AFD8790D41435F82D0CED62B56055E6EE0C0522EBAFFE8DB57916DE7B1BFD5F850D7B198919E7B9E25
Malicious:	false
Reputation:	low
URL:	https://snuts.s3.amazonaws.com/img/logo-sn-sq-bright-40.webp
Preview:	RIFF....WEBPVP8X....8.........ICCP........appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt...P...#wtpt...t....rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin... ...>mmod...`...(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ.......0daDK.......FnlNL.......bfiFI.......xitIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW.......$viVN........skSK.......<zhCN.......$ruRU...$...RenGB.......vfrFR........ms..........hiIN........thTH........caES........enAU.......vesXL........deDE........enUS........ptBR........plPL......."elGR..."...4svSE.......VtrTR.......fptPT.......zjaJP.........L.C.D. .u. .b.o.j.i.... .L.C.D.F.a.r.g.e.-.L.C.D.L.C

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	285274
Entropy (8bit):	5.192551268726613
Encrypted:	false
SSDEEP:	1536:5oNmStoL6TfcoHjIdWhBpN8QBGzEyRSsnWGFCvxw6ngojPQXzClrniSUf2l7f9vf:5oNmS76r2gokXeFiS22l7pf
MD5:	CD81F63B4FB0D94F1ABB9AF1F0EEF1DB
SHA1:	4331A607CC43684995DA8A6871681BE68E3CB547
SHA-256:	2C315D00FA4ECC98C4A202E0731260884EBB66FE0C202E8E0E70503CC2503BA7
SHA-512:	63B73DF19871FB981FFC60619FE6C87CCD136C146A1B4F486700849A4518CB3E51709B73A4BAB6E21644322435AC6F8989D8476DF817E2D80FD62F4CD498C430
Malicious:	false
Reputation:	low
URL:	https://surveynuts.com/assets/application-c1780a0271628269a6e820faac03d562aebaa7432df12838f9dd6c47afcb7eb7.css
Preview:	div.jqcloud{font-family:"Helvetica", "Arial", sans-serif;color:#09f;overflow:hidden;position:relative}div.jqcloud a{color:inherit;font-size:inherit;text-decoration:none}div.jqcloud a:hover{color:#0df}div.jqcloud a:hover{color:#0cf}div.jqcloud span{padding:0}div.jqcloud span.w10{font-size:54px;color:#0cf}div.jqcloud span.w9{font-size:50px;color:#0cf}div.jqcloud span.w8{font-size:44px;color:#0cf}div.jqcloud span.w7{font-size:40px;color:#39d}div.jqcloud span.w6{font-size:34px;color:#90c5f0}div.jqcloud span.w5{font-size:30px;color:#90a0dd}div.jqcloud span.w4{font-size:24px;color:#90c5f0}div.jqcloud span.w3{font-size:20px;color:#a0ddff}div.jqcloud span.w2{font-size:14px;color:#99ccee}div.jqcloud span.w1{font-size:10px;color:#aab5f0}.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1047174163?random=1710778775593&cv=11&fst=1710778775593&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2326), with no line terminators
Category:	downloaded
Size (bytes):	2326
Entropy (8bit):	5.835929471529326
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08IApLQ+qtvV2Ks6:wsbSUtJfxrqLWWWdV6j1EAlH05
MD5:	CF564AE1FFC2EF69F66FBDD5C130307D
SHA1:	B2E370FE2C71C73E16F95D6C8D7F34DD69FFC989
SHA-256:	D7799A8E4B273239F21B9175B10F16F7865E7D5027F79215B94171B722462E67
SHA-512:	BDCD8CFE747D3998086164016D18F56D608DBF1460F476B43F1EA081403D15F3F0DAA084F1BAB040AA137FDC70872CD0893016194B1DF5C558373ECAB2EB0C8F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1047174163/?random=1710778770484&cv=11&fst=1710778770484&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	838
Entropy (8bit):	5.168627606554162
Encrypted:	false
SSDEEP:	24:hYvYJZgqFdvb/h76C4x7rqFPZN/dGjiMU:tJZ1F2CikZmO5
MD5:	FE87F5331154930211BA004B8198D497
SHA1:	412628CC7EB9E5DC205C3E3316711530B1501587
SHA-256:	D89921F857E4F424DD81884C69440688A3316FF4353B51E71AB7CDE9E31CC224
SHA-512:	F5AD11B19A576667689739AB2D2A84FCF4B068689FAF5D83E12713E92DD9B7386B2CCB41ADE2B29611FD76771BB1C73DAD22F56D36A5C220C3032D166389E4BD
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>.<head>.<link href='http://fonts.googleapis.com/css?family=Margarine' rel='stylesheet' type='text/css'>.. <title>The page you were looking for doesn't exist</title>..</head>..<body style="background:#F2F2F2">. This file lives in public/404.html -->. <div style="background:white;border:1px solid lightgrey;width:500px;height:500px;margin-top:60px;padding:10px;margin-left:auto;margin-right:auto;font-family: 'Margarine', cursive;font-size:18pt;font-weight:500;color:grey;text-align:center">..<div style="font-size:38pt;font-weight:900;text-align:center;color:orange">Oh :( </div>. <div>The page you were looking for doesn't exist.</div>. <p>You may have mistyped the address or the page may have moved.<br> Visit our homepage <a href="http://surveynuts.com">SurveyNuts.com</p>. </div>.</body>.</html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2024 17:18:57.948160887 CET	49675	443	192.168.2.4	173.222.162.32
Mar 18, 2024 17:18:58.791925907 CET	49678	443	192.168.2.4	104.46.162.224
Mar 18, 2024 17:19:06.116820097 CET	49734	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.117692947 CET	49735	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.211474895 CET	80	49734	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.211987972 CET	49734	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.212205887 CET	80	49735	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.212305069 CET	49735	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.218600035 CET	49736	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.218800068 CET	49735	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.312226057 CET	80	49735	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.312820911 CET	80	49736	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.312896013 CET	49736	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.315160036 CET	80	49735	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.315439939 CET	80	49735	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.315545082 CET	49735	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.315573931 CET	49735	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:06.409276962 CET	80	49735	18.205.222.128	192.168.2.4
Mar 18, 2024 17:19:06.464947939 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.465007067 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.465095043 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.465564966 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.465604067 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.665726900 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.666444063 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.666485071 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.667538881 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.667618990 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.669107914 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.669187069 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.669351101 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.669368982 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.715487003 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.897650957 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.897922039 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.897984982 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.898252010 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.898252010 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.898284912 CET	443	49737	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.898344040 CET	49737	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.901355982 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.901398897 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.901454926 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.901787996 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:06.901802063 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:06.989928961 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:06.989998102 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:06.990082979 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:06.990369081 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:06.990406036 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.096167088 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.096520901 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.096537113 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.096869946 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.097191095 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.097245932 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.097323895 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.144222975 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.190288067 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.190601110 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.190634012 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.191668987 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.191754103 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.193278074 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.193356037 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.193536043 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.193552971 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.236253977 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.350114107 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.350615025 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.350686073 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.350703955 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.350744009 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.351052046 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.351103067 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.415131092 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.415205956 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.415278912 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.416779041 CET	49741	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.416805029 CET	443	49741	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.418003082 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.418034077 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.418112040 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.419672012 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.419686079 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.444369078 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.444448948 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.444611073 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.444677114 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.444689035 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.444927931 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.444968939 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.444978952 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.444984913 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.445029020 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.538764000 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.538803101 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.538834095 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.538847923 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.538885117 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.539406061 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.539436102 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.539458036 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.539463043 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.539498091 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.539963961 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.539994955 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.540009975 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.540014982 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.540050983 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.540958881 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.540991068 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.541013956 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.541017056 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.541033030 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.541049004 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.541058064 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.541090965 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.555941105 CET	49675	443	192.168.2.4	173.222.162.32
Mar 18, 2024 17:19:07.614603996 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.616544008 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.616556883 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.616894960 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.656830072 CET	49740	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:07.656855106 CET	443	49740	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:07.670337915 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.804111958 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.804305077 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.813596010 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:07.856270075 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:07.926783085 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:07.926793098 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:07.926852942 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:07.928086996 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:07.928100109 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:07.929903984 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:07.929955959 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:07.930111885 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:07.931955099 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:07.931989908 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:07.940881968 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.940891027 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:07.940951109 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.942045927 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.942059994 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:07.942114115 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.943087101 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.943116903 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:07.943186045 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.944111109 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.944123983 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:07.944641113 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.944648981 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:07.945281029 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:07.945291042 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.000648022 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:08.000699997 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:08.000821114 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:08.001291990 CET	49742	443	192.168.2.4	52.55.185.246
Mar 18, 2024 17:19:08.001302004 CET	443	49742	52.55.185.246	192.168.2.4
Mar 18, 2024 17:19:08.121012926 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.121262074 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.121274948 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.122623920 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.122687101 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.124885082 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.124948025 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.125260115 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.125267029 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.157464981 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.158226013 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.158271074 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.159447908 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.159522057 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.161164999 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.161235094 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.161772013 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.161787987 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.165353060 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.211853027 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.253592014 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.258407116 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.259411097 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.274924040 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.274933100 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.275846004 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.275856018 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.276110888 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.276125908 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.277059078 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.277121067 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.277175903 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.277229071 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.277268887 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.277321100 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.280246973 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.280312061 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.280689001 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.280793905 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.281183958 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.281275034 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.281555891 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.281563044 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.281687975 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.281697989 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.281785011 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.281791925 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.322999954 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.323045015 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.323191881 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.353460073 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.353494883 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.353586912 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.353610992 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.353703976 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.353751898 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.353768110 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354048014 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354125977 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354185104 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354196072 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.354213953 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354257107 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.354460001 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354505062 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.354516983 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354567051 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354634047 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.354638100 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.354688883 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.357125044 CET	49746	443	192.168.2.4	104.16.225.240
Mar 18, 2024 17:19:08.357147932 CET	443	49746	104.16.225.240	192.168.2.4
Mar 18, 2024 17:19:08.399955034 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.400522947 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.400531054 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.400579929 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.400593996 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.400604963 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.400626898 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.400657892 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.403611898 CET	49749	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.403624058 CET	443	49749	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.405878067 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.406002998 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.406048059 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.410085917 CET	49748	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.410100937 CET	443	49748	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.414868116 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415499926 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415508032 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415560961 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415570021 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.415610075 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415637016 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415652037 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.415668011 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.415693045 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.416187048 CET	49750	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:08.416196108 CET	443	49750	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:08.622374058 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622399092 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622406960 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622454882 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.622459888 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622493982 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622503996 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.622514963 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.622534990 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.624824047 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.624911070 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.624929905 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.624970913 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.631424904 CET	49745	443	192.168.2.4	18.164.115.48
Mar 18, 2024 17:19:08.631433964 CET	443	49745	18.164.115.48	192.168.2.4
Mar 18, 2024 17:19:08.967181921 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.967262983 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:08.967304945 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.967348099 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:08.967351913 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.967459917 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.967699051 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.967737913 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:08.967999935 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:08.968013048 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:08.969007969 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:08.969048023 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:08.969166994 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:08.969448090 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:08.969465017 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:08.985569954 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:08.985596895 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:08.985677958 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:08.986026049 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:08.986053944 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.021622896 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.021668911 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.021991968 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.023829937 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.023881912 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.055027962 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.055063963 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.055162907 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.055545092 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.055557013 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.193279982 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.193363905 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.196141958 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:09.242180109 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.242213964 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.242441893 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.242564917 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.242590904 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.242664099 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.242685080 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:09.243419886 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.243526936 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.243617058 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.243649006 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.243676901 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.243748903 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.243756056 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.243779898 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:09.243844986 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.244278908 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.244309902 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.244380951 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.245445967 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.245471954 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.246479034 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.246498108 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.246558905 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.246567011 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.247534990 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.247545958 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.247733116 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.247817993 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:09.248177052 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.248193026 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.248405933 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.248414040 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.267839909 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.274169922 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.274188042 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.275233984 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.275348902 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.293946981 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.293948889 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.293967962 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:09.299808025 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.299838066 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.307291985 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.307317972 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.308451891 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.308598042 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.326339960 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.326456070 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.326754093 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.327296019 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.327296019 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.327332020 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.327410936 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.352699041 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:09.367698908 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.367722034 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.367978096 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.368278027 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.368294001 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.369796991 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.369812965 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.370007038 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.370023966 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.415369987 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.415374994 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.454395056 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.454425097 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.454483032 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.457843065 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.457854986 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.481648922 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.481761932 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.481847048 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.487822056 CET	49752	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.487834930 CET	443	49752	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.493467093 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.493567944 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.493935108 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.499844074 CET	49751	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:09.499867916 CET	443	49751	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:09.534125090 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.534790993 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.534801960 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.535907030 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.535970926 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.536339045 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.536423922 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.537194967 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.537228107 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.537480116 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.537493944 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.538660049 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.538774967 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.539604902 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.539604902 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.539674997 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.584237099 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.589145899 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.589148045 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.589153051 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.589154959 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.594953060 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.596123934 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.596139908 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.597184896 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.597307920 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.598458052 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.598515987 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.598751068 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.598757029 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.598787069 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.637372971 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.637375116 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.643474102 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.643822908 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.644243002 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:09.648343086 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:09.655913115 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.656555891 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.656568050 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.657016039 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.657134056 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.657252073 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.657663107 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.657788992 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.658350945 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.658421040 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.658514023 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.668581009 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.668584108 CET	49758	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.668584108 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.668592930 CET	443	49758	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.668612957 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.668781996 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.668790102 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.668828964 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.668843031 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.668859959 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.668900967 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.677531958 CET	49757	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.677541971 CET	443	49757	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.698818922 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.698853970 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.714828968 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.744760990 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.757740021 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.757848024 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.759974003 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.775240898 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.775280952 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.775383949 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.775408030 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.775965929 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.775975943 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.776025057 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.776062012 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.776067019 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.776083946 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.776093960 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.776093960 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.776245117 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.786842108 CET	49755	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.786865950 CET	443	49755	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.795833111 CET	49759	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:09.795865059 CET	443	49759	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:09.803569078 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.844239950 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.891865969 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.891953945 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.892000914 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.892467976 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.892482042 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.892494917 CET	49760	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:09.892501116 CET	443	49760	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:09.945269108 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.945314884 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.945368052 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:09.945395947 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.946824074 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:09.946872950 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:10.000171900 CET	49754	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:10.000191927 CET	443	49754	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:10.020379066 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:10.020459890 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:10.020498991 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:10.020809889 CET	49756	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:10.020826101 CET	443	49756	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:10.021852016 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.021889925 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.021956921 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.022727966 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.022739887 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.103812933 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.103840113 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.103905916 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.104384899 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.104413986 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.203938007 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.204011917 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.205853939 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.205859900 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.206110001 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.208054066 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.252228975 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.309706926 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.310070992 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.310105085 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.311146021 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.311207056 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.311877012 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.311940908 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.311980963 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.352267981 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.360230923 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.360241890 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.379659891 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.379715919 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.379760027 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.381046057 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.381058931 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.381069899 CET	49761	443	192.168.2.4	23.51.58.94
Mar 18, 2024 17:19:10.381074905 CET	443	49761	23.51.58.94	192.168.2.4
Mar 18, 2024 17:19:10.408257961 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.469630003 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:10.469661951 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:10.469724894 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:10.471517086 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:10.471529961 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:10.562869072 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.562942028 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.562999010 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.589369059 CET	49762	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:10.589399099 CET	443	49762	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:10.782568932 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:10.782605886 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:10.782680988 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:10.783071041 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:10.783082962 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:10.977962017 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.001827955 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:11.001847982 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.002238035 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.002250910 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.002701998 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:11.002705097 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.002716064 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.002760887 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.002927065 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:11.003056049 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.004192114 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.004267931 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.004312038 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.004312038 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.004336119 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.044238091 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.057972908 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.213776112 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.213897943 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.219518900 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:11.225904942 CET	49766	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:11.225918055 CET	443	49766	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:11.434721947 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.434801102 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:11.439932108 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.469840050 CET	49765	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:11.469863892 CET	443	49765	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:12.298425913 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.298499107 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.298577070 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.299072027 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.299104929 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.330869913 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.330893993 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.330951929 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.331619978 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.331639051 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.406461000 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.406469107 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.406533003 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.406837940 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.406851053 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.518522978 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.556175947 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.556190014 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.557188988 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.557259083 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.560544968 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.560606956 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.560733080 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.560741901 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.602304935 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.608658075 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.611577988 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.611588001 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.612571001 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.612623930 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.615672112 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.615732908 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.616194010 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.616200924 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.671160936 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.768994093 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.769074917 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.769129992 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.837136030 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.839648962 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.839795113 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.839895010 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.843127012 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.843169928 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.844305992 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.844558954 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.846596003 CET	49768	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:12.846602917 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.846612930 CET	443	49768	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:12.846694946 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.848587036 CET	49769	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:12.848592043 CET	443	49769	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:12.848604918 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:12.848634005 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:12.889930964 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.026758909 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.026848078 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.030034065 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.054655075 CET	49767	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.054687977 CET	443	49767	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.055951118 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.056022882 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.056127071 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.056591988 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.056622982 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.415342093 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.415787935 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.415853024 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.416238070 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.416974068 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.416975021 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.417054892 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.468651056 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.770576954 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.770646095 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:13.772164106 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.772469044 CET	49773	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:13.772502899 CET	443	49773	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:19.175126076 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:19.175189972 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:19.175394058 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:20.833472013 CET	49753	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:20.833525896 CET	443	49753	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:20.883722067 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.883775949 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:20.883847952 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.884273052 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.884285927 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:20.886718035 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.886754990 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:20.887880087 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.889430046 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:20.889448881 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.082698107 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.090754032 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.108582973 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.108601093 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.108766079 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.108782053 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.109041929 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.109173059 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.109600067 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.109666109 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.117397070 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.117471933 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.117801905 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.160237074 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.167733908 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.339024067 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.339121103 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.339158058 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.339190006 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.339221954 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.339236975 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.339265108 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.339265108 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.383256912 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.433248997 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433343887 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433372021 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.433384895 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433473110 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.433697939 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433882952 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433909893 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.433916092 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.433940887 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.436105967 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.527523041 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.527559996 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.527606010 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.527648926 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.527666092 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.527693987 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.527700901 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.527762890 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.527769089 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528260946 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528280973 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528353930 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.528359890 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528386116 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.528414011 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528419018 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.528423071 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528461933 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.528467894 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528486967 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.528559923 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.553318977 CET	49775	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:21.553334951 CET	443	49775	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:21.695575953 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:21.695601940 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:21.695697069 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:21.703111887 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:21.703123093 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.176785946 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.176875114 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.176956892 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.177812099 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.177845001 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.178430080 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.178491116 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.178561926 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.179131985 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.179167032 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.179229975 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.179536104 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.179572105 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.179722071 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.179733992 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.236200094 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.236408949 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.236423969 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.236782074 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.237093925 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.237159014 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.237242937 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.237283945 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.237288952 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.361252069 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.361637115 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.361658096 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.361999035 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.362555981 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.362622023 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.362730026 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.408225060 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.609929085 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.609962940 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.610021114 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.611161947 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.611186981 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.652616024 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.652698040 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.652750969 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.653633118 CET	49779	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:22.653646946 CET	443	49779	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:22.676022053 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.676121950 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.676161051 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.676340103 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.677042961 CET	49781	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.677057028 CET	443	49781	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.678575039 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.678634882 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.678991079 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.679527998 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.679609060 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.679660082 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.682562113 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:22.682585955 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:22.682637930 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:22.683262110 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:22.683274031 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:22.720273018 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.731051922 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.879070997 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.894956112 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.894973993 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.895349979 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.896456003 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.896529913 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.896704912 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.940232992 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:22.940247059 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:22.954714060 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.954830885 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:22.954936981 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.959820986 CET	49782	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:22.959870100 CET	443	49782	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:23.035907030 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.047468901 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:23.047482967 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.047869921 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.052762985 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:23.052849054 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.053359985 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:23.100240946 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.385513067 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.385591984 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.385901928 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:23.391813993 CET	49787	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:23.391824961 CET	443	49787	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:23.493541002 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.494158983 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.494177103 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.494517088 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.495465040 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.495529890 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.495781898 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.540240049 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.541594982 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.587584019 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.588308096 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.588440895 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.607322931 CET	49786	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.607336998 CET	443	49786	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.779237986 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.779283047 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.779978037 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.780020952 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.780174971 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.783817053 CET	49783	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:23.783830881 CET	443	49783	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:23.786932945 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:23.786955118 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:23.787077904 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:23.787797928 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:23.787810087 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:23.974240065 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:23.998718023 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:23.998727083 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:23.999088049 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:23.999789000 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:23.999842882 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:24.000272036 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:24.044236898 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:24.219995022 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:24.220354080 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:24.220419884 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:24.401834965 CET	49790	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:24.401856899 CET	443	49790	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:24.736083031 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.736112118 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.736166954 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.736865044 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.736877918 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.923887968 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.924920082 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.924930096 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.925270081 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.925741911 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.925801992 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:24.926062107 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:24.968249083 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:25.154481888 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:25.154563904 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:25.154835939 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:25.155930042 CET	49791	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:25.155947924 CET	443	49791	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:26.772638083 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.772675991 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.772850037 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.773952961 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.773964882 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.775650978 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.820233107 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.892596960 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.892638922 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.892735004 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.892748117 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.892950058 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.892997026 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.893002987 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.893274069 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.893294096 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.893301964 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.893335104 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.893362045 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.988338947 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.988396883 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.988662958 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.988702059 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.988715887 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.989067078 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.989130974 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.989139080 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.989237070 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.989274979 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.989279985 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.993271112 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.993434906 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.993453026 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.993778944 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:26.994237900 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:26.994298935 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.029005051 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.042800903 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083448887 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083458900 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083507061 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083513975 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083525896 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083538055 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083576918 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083580971 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083592892 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083622932 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083631992 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083666086 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083678961 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083686113 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083714008 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083740950 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.083743095 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.083784103 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.084295988 CET	49776	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:27.084309101 CET	443	49776	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:27.095547915 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.095575094 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.095634937 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.098164082 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.098174095 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.177232981 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.177298069 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.177376032 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.178175926 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.178209066 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.215265036 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.215302944 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.215390921 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.219651937 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.219667912 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.294658899 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.294696093 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.294934034 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.296338081 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.296365023 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.386717081 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.387012959 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.387025118 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.387350082 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.387710094 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.387768030 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:27.400748014 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.400779009 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.400839090 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.401174068 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.401187897 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.404005051 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.404033899 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.404094934 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.404427052 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.404439926 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.434031963 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:27.485965967 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.486762047 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.486779928 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.487121105 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.487982035 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.488046885 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.488146067 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.528271914 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.583539963 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.583883047 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.583903074 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.584197044 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.584647894 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.584716082 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.584872961 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.621033907 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.621315002 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.621350050 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.621823072 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.622231007 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.622337103 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.622431040 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.632230997 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.664269924 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.709988117 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.710222960 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.710267067 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.710567951 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.710839033 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.710905075 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.710959911 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.710990906 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:27.711004972 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:27.770993948 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.771034956 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.771119118 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.771130085 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.771141052 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.771203041 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.771686077 CET	49798	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.771692991 CET	443	49798	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.777090073 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:27.777117968 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.777198076 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:27.777522087 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:27.777533054 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.887036085 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.887140989 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.887326956 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.887350082 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.887528896 CET	49806	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.887542009 CET	443	49806	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.887939930 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.887949944 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.888279915 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.888700962 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.888758898 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.889386892 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:27.917809010 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.917901993 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.917994976 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.918438911 CET	49799	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:27.918446064 CET	443	49799	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:27.932245016 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:27.963870049 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.964204073 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:27.964215040 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.964570045 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.964878082 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:27.964955091 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:27.965073109 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:28.012238026 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:28.129210949 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:28.129287004 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:28.129443884 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:28.130511045 CET	49797	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:28.130521059 CET	443	49797	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:28.135595083 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.135626078 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.135699034 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.136204004 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.136220932 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.156460047 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:28.156548023 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:28.158032894 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:28.158093929 CET	49807	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:28.158107042 CET	443	49807	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:28.208282948 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:28.208399057 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:28.210139036 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:28.210139036 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:28.216902971 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.216919899 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.217000008 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.217458010 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.217467070 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.419308901 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.422033072 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.422041893 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.422328949 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.426172018 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.426224947 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.426348925 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.468239069 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.488426924 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.488701105 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.488708973 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.488986015 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.490111113 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.490163088 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.490245104 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.510042906 CET	49808	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:28.510063887 CET	443	49808	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:28.532238007 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.665442944 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.665564060 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.665668964 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.666424990 CET	49816	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:28.666434050 CET	443	49816	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:28.839353085 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.839410067 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:28.842037916 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:28.842037916 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:29.141365051 CET	49814	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:29.141383886 CET	443	49814	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:30.764281034 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.764317036 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.764502048 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.765692949 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.765696049 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.765712023 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.808258057 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887619972 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887669086 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887692928 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887722015 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.887749910 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887795925 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.887859106 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.887908936 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.960752010 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.961004972 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.961025953 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.961360931 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.961828947 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.961896896 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.983618975 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.983668089 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.983685970 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.983714104 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.983766079 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.983886957 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.983941078 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.984508991 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.984517097 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.984570026 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.984590054 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.984775066 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.984818935 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:30.984833002 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:30.985071898 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.011010885 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.077925920 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.077972889 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078006029 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078041077 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078056097 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078058004 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078105927 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078113079 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078432083 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078447104 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078486919 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078499079 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078517914 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078533888 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078865051 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078910112 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078921080 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.078937054 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078950882 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.078979015 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.079008102 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.090279102 CET	49792	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:31.090311050 CET	443	49792	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:31.180123091 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.180202961 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.180286884 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.180915117 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.180954933 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.210449934 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.210488081 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.210546970 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.212980986 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.212999105 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.232177973 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.232208014 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.232316971 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.232542038 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.232569933 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.417793989 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.417833090 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.417924881 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.418766022 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.418786049 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.420628071 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.420661926 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.420727968 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.420962095 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.420979977 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.480485916 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.480730057 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.480751991 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.481098890 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.481448889 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.481515884 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.481698990 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.501049995 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.501286030 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.501343012 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.501683950 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.501981020 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.502053976 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.502289057 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.524240017 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.548275948 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.608355045 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.608563900 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.608580112 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.609517097 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.609822035 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.609905005 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.609930038 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.610129118 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.610299110 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.610313892 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.610630035 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.610913992 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.610976934 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.611013889 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.652271986 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.652309895 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.662506104 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.662693977 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.711357117 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.714184999 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.714222908 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.714566946 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.714888096 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.714962006 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.715059996 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.715106010 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:31.715117931 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:31.797856092 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.798207045 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.798311949 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.801615953 CET	49823	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.801647902 CET	443	49823	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.892980099 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.893018007 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.893636942 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.893650055 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.893784046 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.893939018 CET	49822	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:31.893956900 CET	443	49822	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:31.897285938 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:31.897314072 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:31.897945881 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:31.898219109 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:31.898231030 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:31.914535999 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.914652109 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.914782047 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.915817022 CET	49825	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.915829897 CET	443	49825	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.924501896 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.924619913 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:31.924935102 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.925004005 CET	49824	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:31.925015926 CET	443	49824	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:32.087649107 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.091819048 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:32.091831923 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.092180967 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.095976114 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:32.096041918 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.096220970 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:32.140239954 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.148432970 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:32.148518085 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:32.149530888 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:32.149662971 CET	49821	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:32.149673939 CET	443	49821	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:32.153563976 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.153598070 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.153722048 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.153940916 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.153960943 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.332912922 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.332983017 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.335994005 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:32.339824915 CET	49826	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:32.339848042 CET	443	49826	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:32.345851898 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.345875025 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.346518040 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.346966982 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.346990108 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.510848999 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.511121035 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.511132956 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.511470079 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.511807919 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.511874914 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.511975050 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.534039021 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.534336090 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.534349918 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.534730911 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.535157919 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.535157919 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.535180092 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.535231113 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.552273035 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.588171959 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.782669067 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.782757998 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.785928011 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.786206007 CET	49828	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:32.786225080 CET	443	49828	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:32.864639997 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.864746094 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:32.866142988 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.876955032 CET	49827	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:32.876971960 CET	443	49827	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:35.153923035 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.154623032 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.154695034 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.154778957 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.155086994 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.155122995 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.196244001 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290129900 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290292978 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290373087 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.290384054 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290592909 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290710926 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.290718079 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.290817022 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.291099072 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.291208029 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.351023912 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.354286909 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.354334116 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.354665995 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.355154991 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.355232000 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.384253979 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.384442091 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.384568930 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.384859085 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.385324001 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.385332108 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.385487080 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.385493040 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.385732889 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.386111975 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.386285067 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.386291027 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.402668953 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.430376053 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.478424072 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.478584051 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.478671074 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.478780985 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.478815079 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.478929996 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.479970932 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.480017900 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.480061054 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.480067015 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.480124950 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.480124950 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.480307102 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.480635881 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.481573105 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.481590986 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.481672049 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.481678963 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.481722116 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.481800079 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.481868029 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.481874943 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.482012987 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.573230028 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.573266983 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.573355913 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.573355913 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.573368073 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.573515892 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.573764086 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.573771000 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.574002981 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.574079037 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.574153900 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.574219942 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.574223995 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.574323893 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.574656963 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.575068951 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.575083971 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.575233936 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.575241089 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.575371027 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.575721025 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.575879097 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.576545000 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.576586962 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.576637030 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.576642036 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.576677084 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.577080011 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.577474117 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.577488899 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.577591896 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.577591896 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.577596903 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.577733994 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.578125000 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.578250885 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.578257084 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.619756937 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.666873932 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.666894913 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.667072058 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.667082071 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.667152882 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.667401075 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.667690039 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.667695045 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.668035984 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.668073893 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.668107986 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.668112040 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.668149948 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.668180943 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.668292999 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.668299913 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.670207977 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.670226097 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.670288086 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.670312881 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.670312881 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.672897100 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.675851107 CET	49820	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:35.675862074 CET	443	49820	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:35.710047007 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:35.756233931 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.828932047 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.828982115 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.829013109 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.829035997 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.829119921 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:35.829252005 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:35.847845078 CET	49795	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:35.847862959 CET	443	49795	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:35.858078957 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:35.858105898 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:35.858432055 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:35.858699083 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:35.858710051 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.145802975 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.194582939 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.269948006 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.269958019 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.270371914 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.274919987 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.274983883 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.275933981 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.320240021 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.389688015 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.389807940 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.389842987 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.389852047 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.389856100 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.389895916 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.390765905 CET	49831	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:36.390779018 CET	443	49831	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:36.724365950 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.724395037 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.724450111 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.724740028 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.724750042 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.794938087 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.794961929 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.795023918 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.801291943 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.801305056 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.805471897 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.848263025 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.902659893 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.902698994 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.902775049 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.902822018 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.902889967 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.902925968 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.902968884 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.903009892 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.903084993 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.990443945 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.990952015 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.990969896 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.991285086 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.994548082 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.994612932 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:36.994872093 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:36.996623039 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.996809006 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.996834993 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.996860027 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.996895075 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.996962070 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:36.997068882 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:36.997082949 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.040234089 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.040287971 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.049591064 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.049622059 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.049734116 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.050244093 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.050256968 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.068470001 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.069084883 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.069094896 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.069410086 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.070400953 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.070460081 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.073662996 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.090419054 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090425968 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090461969 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090497017 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.090514898 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090550900 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090610027 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.090625048 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090688944 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090775013 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.090825081 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.090826035 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.090841055 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091006994 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091057062 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091092110 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.091108084 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091140985 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.091258049 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091311932 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.091346025 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.091448069 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.092253923 CET	49829	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.092282057 CET	443	49829	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.116238117 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.233480930 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.233858109 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.233869076 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.234186888 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.234672070 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.234735966 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.237852097 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.276405096 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.276446104 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.276566982 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.276629925 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.278178930 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.278877020 CET	49832	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.278896093 CET	443	49832	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.280265093 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.287587881 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.287601948 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.287686110 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.288177013 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.288187981 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.366367102 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.367029905 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.367233038 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.367386103 CET	49833	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:37.367393970 CET	443	49833	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:37.485269070 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.486197948 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.486207962 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.486527920 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.487298012 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.487298012 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.487312078 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.487370968 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.543266058 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.551479101 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.551601887 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.555957079 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.556421041 CET	49835	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:37.556435108 CET	443	49835	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:37.737867117 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.738025904 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.739900112 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.743541002 CET	49836	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:37.743547916 CET	443	49836	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:37.748661041 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.748742104 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.748888969 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.752005100 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.752038956 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.757925034 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.757946014 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.758030891 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.759804010 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.759829044 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.949678898 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.949923992 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.949965000 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.950329065 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.950412035 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.950651884 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.950725079 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:37.950921059 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.950936079 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.951092005 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:37.951256037 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.951734066 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.951802015 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.951883078 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:37.996258974 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:37.996295929 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:38.163038969 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:38.163362980 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:38.163418055 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:38.163584948 CET	49837	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:38.163608074 CET	443	49837	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:38.190669060 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:38.191231966 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:38.191298962 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:38.191446066 CET	49838	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:38.191462994 CET	443	49838	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:38.325647116 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.325723886 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.325802088 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.326909065 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.326942921 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.521533966 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.539484978 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.539562941 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.539930105 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.574740887 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.574876070 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.574969053 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.616245985 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.761392117 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.761545897 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:38.761595964 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.844387054 CET	49839	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:19:38.844424963 CET	443	49839	54.161.241.46	192.168.2.4
Mar 18, 2024 17:19:39.717749119 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.717783928 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.719716072 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.719753981 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.719789982 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.719887018 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.720463991 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.720468044 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.720480919 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.720482111 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.921192884 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.921526909 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.921539068 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.921895981 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.922547102 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.922610044 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:39.922805071 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:39.964237928 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.222497940 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.222795963 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.222815037 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.223582983 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.223953009 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.224036932 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.224118948 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.225183964 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.225248098 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.225301027 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.225536108 CET	49840	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.225549936 CET	443	49840	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.264229059 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.497535944 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.497680902 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:40.497733116 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.497987986 CET	49841	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:40.498004913 CET	443	49841	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:46.760082960 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.760113955 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:46.760456085 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.760479927 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:46.760514021 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.760572910 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.760879993 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.760893106 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:46.761223078 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:46.761238098 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.012622118 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.012898922 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.012932062 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.013556957 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.013921976 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.014028072 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.014133930 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.016835928 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.017031908 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.017045975 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.017446041 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.017766953 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.017827988 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.056240082 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.058149099 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.133033037 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133121967 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133215904 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.133244991 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133342028 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133393049 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.133399963 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133447886 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.133541107 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.133595943 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.227731943 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.227828026 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.227967024 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.228024006 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.228338957 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.228348970 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.228403091 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.322338104 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.322413921 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.322427988 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.322623014 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.322669029 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.322674036 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.322859049 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.322890997 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.322896957 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.323249102 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.323299885 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.323304892 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324031115 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324064016 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324088097 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.324096918 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324117899 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.324132919 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.324784040 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324811935 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324848890 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.324853897 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.324881077 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.324894905 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.325251102 CET	49843	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:47.325258970 CET	443	49843	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:47.344554901 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.344594955 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.344670057 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.345124960 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.345141888 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.403892994 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.403929949 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.403989077 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.404762030 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.404774904 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.460331917 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.460361004 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.460423946 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.460813046 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.460824966 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.482323885 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.482355118 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.482417107 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.482820034 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.482831001 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.634170055 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.636362076 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.636390924 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.636748075 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.637226105 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.637295961 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:47.654064894 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.654109001 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.654172897 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.655045986 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.655066013 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.655911922 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.655937910 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.656004906 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.656505108 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.656512022 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.683403969 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:47.730601072 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.730868101 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.730880022 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.731220007 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.732070923 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.732127905 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.732819080 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.748688936 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.749203920 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.749227047 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.749558926 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.750588894 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.750650883 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.751368046 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:47.776238918 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.796236992 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:47.836431026 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.837352037 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.837380886 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.837712049 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.839260101 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.839328051 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.839850903 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:47.884237051 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:47.940917015 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.941371918 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.941397905 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.941732883 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.942908049 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.942967892 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:47.943315983 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.943315983 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:47.943341017 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.022759914 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.022814035 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.023010969 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:48.023020983 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.023361921 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.026160955 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:48.026534081 CET	49849	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:48.026541948 CET	443	49849	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.032628059 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.032675028 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.032782078 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.033282042 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.033304930 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.047924995 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.048199892 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.048382044 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:48.049240112 CET	49850	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:48.049254894 CET	443	49850	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:48.140008926 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.140682936 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.140923977 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.140933037 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.140973091 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.141316891 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.141408920 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.142302036 CET	49851	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.142307997 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.142322063 CET	443	49851	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.142358065 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.143213034 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.184238911 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.221009016 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.223715067 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.223747015 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.224255085 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.227327108 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.227413893 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.227668047 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.268274069 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.276752949 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.358005047 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.358091116 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.358196974 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.361850977 CET	49848	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.361865044 CET	443	49848	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.363626003 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.363668919 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.363948107 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.364548922 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.364567041 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.370007992 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.370027065 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.370445013 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.371301889 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.371314049 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.431858063 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.431973934 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.432116985 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.432692051 CET	49852	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:48.432699919 CET	443	49852	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:48.447832108 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.447902918 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.449625015 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.449989080 CET	49853	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:48.450006962 CET	443	49853	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:48.458861113 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.458879948 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.458970070 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.461412907 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.461421967 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.652961016 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.660506964 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.660516977 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.660859108 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.668534040 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.668534040 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.668548107 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.668596029 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.715624094 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.728822947 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.729387045 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.729399920 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.729685068 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.730612040 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.730667114 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.730941057 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:48.772244930 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:48.893558025 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.893855095 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.893973112 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.894005060 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.894370079 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.894391060 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.894486904 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.894855022 CET	49856	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:48.894855022 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.894862890 CET	443	49856	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:48.894920111 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:48.895311117 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.895311117 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:48.895342112 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:49.083065033 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:49.083142996 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:49.083198071 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:49.084202051 CET	49855	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:49.084223986 CET	443	49855	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:49.315721035 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:49.315900087 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:49.316085100 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:49.360536098 CET	49854	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:49.360582113 CET	443	49854	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:50.175023079 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.175055981 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.175122976 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.176222086 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.176234007 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.529246092 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.529797077 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.529813051 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.530148983 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.530539989 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.530603886 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.530915022 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.572242975 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.763761044 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.763797998 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.763854980 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.788296938 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.788311005 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.802031994 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.844238043 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.880134106 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.880203962 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.880300999 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.887151957 CET	49857	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:50.887176037 CET	443	49857	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:50.922848940 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.922894955 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.922929049 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.922959089 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.922981024 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.922991037 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:50.923026085 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.967586040 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:50.991790056 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.003036976 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.003046989 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.003559113 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.004529953 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.004611015 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.019334078 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.019421101 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.019650936 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.019689083 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.019711018 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.020178080 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.020186901 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.020256042 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.020263910 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.058717966 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.073842049 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.113990068 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114001989 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114034891 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114048004 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114176035 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114911079 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114918947 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114938021 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.114944935 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.115160942 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.115238905 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.115267992 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.115287066 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.115326881 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.115747929 CET	49842	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:51.115766048 CET	443	49842	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:51.211700916 CET	49734	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:51.325191975 CET	49736	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:19:51.580183029 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:51.580288887 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:51.580440998 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:51.580868959 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:51.580887079 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:51.821536064 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.821592093 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:51.821667910 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.823168993 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.823189974 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:51.825941086 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.825990915 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:51.826060057 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.826934099 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:51.826950073 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.022804976 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.022846937 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.022908926 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.023951054 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.023967981 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.026446104 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.026479006 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.026545048 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.027791977 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.027806044 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.096852064 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.097210884 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.097235918 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.097934008 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.098644972 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.099011898 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.099087954 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.099666119 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.099700928 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.099953890 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.100100040 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.100558996 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.100627899 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.100996971 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.113776922 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.118129015 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.118139029 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.118474007 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.119038105 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.119096041 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.119990110 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.120255947 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.120260000 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.140240908 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.148233891 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.208317995 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.209374905 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.209402084 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.209861040 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.210702896 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.210786104 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.210830927 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.256226063 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.259450912 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.389615059 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.389655113 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.389707088 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.389734983 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.390328884 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.390381098 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.391961098 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.392667055 CET	49860	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.392719984 CET	443	49860	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.392764091 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.392848015 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.433547020 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.433581114 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.433660984 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.434003115 CET	49861	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:52.434030056 CET	443	49861	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:52.435421944 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.435434103 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.509955883 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.510329008 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.510339975 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.510627985 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.511723042 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.511779070 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.512079000 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.531193018 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.531301975 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.531352997 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.532708883 CET	49862	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.532728910 CET	443	49862	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.543751001 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.543880939 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.543929100 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.545053005 CET	49859	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:19:52.545061111 CET	443	49859	44.237.140.36	192.168.2.4
Mar 18, 2024 17:19:52.555366993 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.555418015 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.555496931 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.556229115 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.556416035 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.556431055 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.625268936 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.625755072 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.625776052 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.626102924 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.626656055 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.626717091 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.626869917 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.672240973 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.717701912 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.717787027 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.717869997 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.718815088 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.718832016 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.725791931 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.725838900 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.725904942 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.727392912 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.727413893 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.771553040 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.771658897 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.772705078 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.773170948 CET	49863	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.773190022 CET	443	49863	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.876426935 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.876487970 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.876535892 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.878776073 CET	49864	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:52.878784895 CET	443	49864	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:52.900190115 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.900448084 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.900475979 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.900769949 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.901067019 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.901139021 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.901210070 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.909440994 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.909621000 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.909655094 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.909950972 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.910207033 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.910269022 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.910351038 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:52.912463903 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.912635088 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.912661076 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.912939072 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.913176060 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.913229942 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.913255930 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:52.944236040 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.952240944 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:52.960259914 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:52.965785027 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:53.205250978 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.205326080 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.205384016 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:53.205785990 CET	49866	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:53.205806971 CET	443	49866	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.218184948 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.218242884 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.218339920 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:53.218497038 CET	49867	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:53.218521118 CET	443	49867	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:53.267313004 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:53.267406940 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:53.267463923 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:53.267935038 CET	49865	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:19:53.267956018 CET	443	49865	44.238.198.87	192.168.2.4
Mar 18, 2024 17:19:53.347913980 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.347968102 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.348067999 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.348387003 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.348411083 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.547314882 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.589955091 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.693958998 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.693988085 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.694478035 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.695065975 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.695141077 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.695413113 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:53.736238003 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.854455948 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.854536057 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:53.854608059 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:54.121428967 CET	49868	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:54.121510983 CET	443	49868	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:54.782696009 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.782780886 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.782861948 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.788575888 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.788630962 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.843966961 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.884243965 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964407921 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964636087 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964713097 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.964724064 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964811087 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964869022 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.964874029 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.964909077 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.965020895 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.965056896 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:54.965076923 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.965112925 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:54.985348940 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.028978109 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.059556007 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.059633970 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.060064077 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.060138941 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.060497046 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.060504913 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.060570002 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.060580969 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.060621977 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.060856104 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.060920000 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.138590097 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.138641119 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.139260054 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.141716957 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.141793966 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.154509068 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.154571056 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.155142069 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155195951 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155215979 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.155226946 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155239105 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.155263901 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.155853987 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155893087 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155915976 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.155921936 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.155956984 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.156075954 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.156121016 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.156126976 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.156152010 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.156164885 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.156199932 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.193475008 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.315392017 CET	49858	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.315412998 CET	443	49858	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.316983938 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.317028999 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.317115068 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.318388939 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.319010019 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.319026947 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.319641113 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:55.364239931 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:55.364258051 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.416017056 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.416985035 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417062998 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.417094946 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417114973 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417167902 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.417176962 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417243004 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.417308092 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417315960 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.417363882 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.421413898 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:55.421511889 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:55.421768904 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:55.434815884 CET	49847	443	192.168.2.4	54.231.230.225
Mar 18, 2024 17:19:55.434840918 CET	443	49847	54.231.230.225	192.168.2.4
Mar 18, 2024 17:19:55.507725954 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.507754087 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.507819891 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.508703947 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.508716106 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.512453079 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.512463093 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.512535095 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.512756109 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.512797117 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.512814045 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.512835026 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.512886047 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.513983965 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.513993025 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.514053106 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.514062881 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.514107943 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.516016006 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.516442060 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.516463995 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.516809940 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.517158985 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.517225981 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.517378092 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.556061029 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.556138039 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.564229965 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609220982 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609278917 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609318972 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609333038 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609347105 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609363079 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609391928 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609391928 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609405994 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609441996 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609445095 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609463930 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609474897 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609482050 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609507084 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609528065 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609541893 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609563112 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609591007 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609605074 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.609612942 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.609628916 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.660458088 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.703118086 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.703130960 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.703171968 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.703203917 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.703237057 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.703813076 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.704025030 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.704045057 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.704081059 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.704090118 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.704116106 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.704127073 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.704303980 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.704350948 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.704406023 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.704448938 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.705580950 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.705599070 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.705674887 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.705682993 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.706623077 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.706644058 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.706687927 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.706696033 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.706724882 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.706753016 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.707108021 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.707166910 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.707174063 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.708482027 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.708498001 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.708549023 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.708559036 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.708573103 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.747123957 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.748567104 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.748927116 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.749007940 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.749031067 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.749301910 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.749361038 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.749370098 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.750325918 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.755178928 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.759795904 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.796873093 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.796894073 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.796983004 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.797012091 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.797137976 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.797657013 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.797673941 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.797748089 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.797759056 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.797859907 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.798110962 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798126936 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798178911 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.798191071 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798269033 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.798537970 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798553944 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798612118 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.798620939 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798683882 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.798721075 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.798772097 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799161911 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799179077 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799216986 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799226046 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799252033 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799527884 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.799684048 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799717903 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799776077 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799783945 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799814939 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799894094 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799945116 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.799952984 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799972057 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.799998045 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.800010920 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.800014019 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.800477982 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.801425934 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.801493883 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.801732063 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.802418947 CET	49869	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.802452087 CET	443	49869	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842391968 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842454910 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.842470884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842516899 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842533112 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842575073 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.842710972 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842776060 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.842812061 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.842861891 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.848238945 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.915359974 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.915435076 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.915637016 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.916501045 CET	49871	443	192.168.2.4	54.231.202.161
Mar 18, 2024 17:19:55.916517973 CET	443	49871	54.231.202.161	192.168.2.4
Mar 18, 2024 17:19:55.936258078 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936300993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936315060 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936330080 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936342955 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936374903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936419010 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936443090 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936453104 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936460972 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936475992 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936666965 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936734915 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936741114 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936774969 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.936837912 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.936844110 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937022924 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937066078 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.937072992 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937146902 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937196970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.937216997 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937254906 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:55.937264919 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:55.978636980 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030003071 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030078888 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030086040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030100107 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030145884 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030409098 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030472994 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030476093 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030487061 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030528069 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030549049 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030601978 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030850887 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030899048 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030908108 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030915976 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.030944109 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030956030 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.030977964 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031022072 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031030893 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.031037092 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031084061 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.031107903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031156063 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.031461000 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031476974 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031510115 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.031514883 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.031550884 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.031559944 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.123823881 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.123847961 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.123903036 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.123915911 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.123944998 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.123963118 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.124531984 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.124583960 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.124603033 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.124608040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.124634027 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.124651909 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.124994993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.125062943 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.125068903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.125552893 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.125602961 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.125610113 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.126610994 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.126631021 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.126662016 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.126667976 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.126703024 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.127579927 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.127593040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.127648115 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.127655983 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.128812075 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.128829956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.128866911 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.128873110 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.128905058 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.129837990 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.129854918 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.129901886 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.129908085 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.129931927 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.132379055 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132409096 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132450104 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.132455111 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132476091 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132491112 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.132494926 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132519007 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.132524967 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.132567883 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.132571936 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.133532047 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.133554935 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.133586884 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.133591890 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.133632898 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.134881020 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.134897947 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.134944916 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.134948969 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.134988070 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.135864973 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.135881901 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.135951996 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.135957003 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.136462927 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.136527061 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.136532068 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.136627913 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.136710882 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.136715889 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.183604956 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.217437029 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.217511892 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.217534065 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.217557907 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.217581987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.217611074 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.217917919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.217936039 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.217977047 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.217982054 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.218019009 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.218096972 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.218368053 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.218385935 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.218432903 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.218436956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.218461037 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.218540907 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.218975067 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.218991041 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219024897 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219029903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219055891 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219075918 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219276905 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219290972 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219341040 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219345093 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219413042 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219765902 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219790936 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219825983 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219830036 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.219856977 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219881058 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.219953060 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220004082 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220532894 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220552921 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220590115 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220594883 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220621109 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220653057 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220824003 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220877886 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220880032 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220907927 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.220911980 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.220982075 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.221128941 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.221182108 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.221564054 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.221621037 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.221631050 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.221668005 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.221715927 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.221719980 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.221899033 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222239017 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222306013 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222311020 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222326040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222353935 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222373009 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222764015 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222791910 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222820044 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222824097 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222837925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222851992 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222876072 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.222878933 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.222918987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.223320961 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.223368883 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.223382950 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.223387003 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.223422050 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.223442078 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.224709034 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.224735022 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.224760056 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.224808931 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.224812984 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.224889040 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.225492954 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.225524902 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.225548029 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.225550890 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.225580931 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.225598097 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.226660967 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.226695061 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.226722956 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.226726055 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.226752043 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.226768970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227015018 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227040052 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227067947 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227071047 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227118015 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227122068 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227274895 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227303982 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227319002 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227325916 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227349997 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227510929 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227633953 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227638006 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227709055 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.227766037 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.227771044 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228081942 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228107929 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228135109 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228141069 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228152990 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228156090 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228204966 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228209019 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228276968 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228327036 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228331089 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228478909 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228542089 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228545904 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228568077 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228588104 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228593111 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228621006 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228652954 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228719950 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228763103 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.228827953 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.228877068 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229125023 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229185104 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229188919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229243994 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229280949 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229293108 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229296923 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229321003 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229345083 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229347944 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229377985 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229441881 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229477882 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229492903 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.229496956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.229535103 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230142117 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230195045 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230197906 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230215073 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230238914 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230325937 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230379105 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230382919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230755091 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230803967 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230808020 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230845928 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230891943 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.230897903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.230937958 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.231070995 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.231126070 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.231126070 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.231142998 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.231169939 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.231209993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.231250048 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.231254101 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.232490063 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.311209917 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.311284065 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.311625957 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.311683893 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.311693907 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.311701059 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.311724901 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.311956882 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312012911 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312016964 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312182903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312232971 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312237024 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312263012 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312299013 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312304020 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312305927 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312319040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312362909 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312594891 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.312659025 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.312663078 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.313019991 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.313062906 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.313077927 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.313090086 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.313127995 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.313226938 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.313270092 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314024925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.314064980 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.314091921 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314095974 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.314124107 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314152956 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314224005 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.314269066 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314414978 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.314483881 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.314981937 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315053940 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.315057993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315234900 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315284967 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.315289974 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315535069 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315582037 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.315586090 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315622091 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.315668106 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.315671921 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316239119 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316277027 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316314936 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.316319942 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316346884 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.316351891 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316402912 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.316406965 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316560984 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316611052 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.316617012 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316854000 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316884995 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316925049 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.316931963 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.316942930 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317468882 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317490101 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317518950 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317523956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317548990 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317553997 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317600012 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317605019 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317770958 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317830086 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317833900 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317909002 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317960024 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.317964077 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.317976952 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318023920 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318027973 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318120956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318162918 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318166018 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318176985 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318213940 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318217993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318228006 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318274021 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318279028 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318357944 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318413973 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318418026 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318465948 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318480968 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318485022 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318501949 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318531990 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318553925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318645000 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318645000 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318660021 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318686008 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318706989 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318711042 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318722010 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318747997 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.318943024 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.318994999 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319001913 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319195032 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319228888 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319246054 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319251060 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319273949 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319283962 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319546938 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319562912 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319597006 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319601059 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319614887 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319628000 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319653034 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319657087 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319863081 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319894075 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319921970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319926023 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.319972038 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.319988966 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320038080 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320183039 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320214033 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320245028 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320254087 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320264101 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320334911 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320386887 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320390940 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320494890 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320538998 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320543051 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320586920 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320911884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320929050 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320966959 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.320971012 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320986986 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.320998907 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321014881 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321017981 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321041107 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321069002 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321233034 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321285963 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321290016 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321707964 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321722031 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321749926 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321755886 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321765900 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321794033 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321811914 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.321814060 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321825981 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.321866035 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.322189093 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322204113 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322237968 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322238922 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.322247982 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322271109 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.322304964 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.322309017 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322623014 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322638988 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322674036 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.322679043 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.322704077 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323005915 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323036909 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323059082 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323062897 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323092937 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323319912 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323352098 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323373079 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323376894 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323405981 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323640108 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323672056 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323692083 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323699951 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323717117 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323736906 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323801994 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.323848963 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.323853016 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324320078 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324336052 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324367046 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324369907 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324379921 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324398041 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324414015 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324428082 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324431896 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324450970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324471951 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324738026 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324851036 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324867964 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324915886 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324924946 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.324960947 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.324978113 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325215101 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325232029 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325261116 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325265884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325293064 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325316906 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325316906 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325619936 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325638056 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325676918 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325681925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325716019 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325725079 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325923920 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325941086 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325972080 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.325975895 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.325998068 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326034069 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326395035 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326411963 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326452017 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326458931 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326493979 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326514006 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326664925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326684952 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326714039 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326719046 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.326746941 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.326766968 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327020884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327035904 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327073097 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327076912 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327102900 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327125072 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327299118 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327318907 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327353001 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327358961 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327383995 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327402115 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327647924 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327665091 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327702999 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327706099 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.327733040 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.327744961 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328233957 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328252077 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328280926 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328285933 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328314066 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328324080 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328679085 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328697920 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328737020 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328742027 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.328768015 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.328784943 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329003096 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329116106 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329132080 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329164982 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329169035 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329190016 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329205990 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329473972 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329488993 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329531908 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329536915 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329590082 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329737902 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329752922 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329796076 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329802036 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.329835892 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329859018 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.329915047 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330019951 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330060959 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330081940 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330116034 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330120087 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330147982 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330168962 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330452919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330501080 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330503941 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330509901 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330545902 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330806971 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330822945 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330861092 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330867052 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.330893040 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.330916882 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331085920 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331101894 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331135988 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331140041 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331166983 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331183910 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331415892 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331433058 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331471920 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331476927 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331501961 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331521034 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331789970 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331809998 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331842899 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331851006 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.331876993 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.331887007 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.332796097 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.422843933 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.422873020 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.422945023 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.422966957 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.422991037 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.423012972 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.423851967 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.423867941 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.423914909 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.423921108 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.423954010 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.423971891 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.424788952 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.424814939 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.424861908 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.424868107 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.424896002 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.424916983 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.425856113 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.425879955 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.425909996 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.425915956 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.425952911 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.425970078 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.426934004 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.426964045 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.427000046 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.427006960 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.427042007 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.427063942 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.427714109 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.427735090 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.427771091 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.427776098 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.427808046 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.427829981 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.428679943 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.428699970 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.428761005 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.428767920 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.428914070 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.429857969 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.429888964 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.429923058 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.429928064 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.429999113 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.431283951 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.431318045 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.431372881 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.431379080 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.431402922 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.431418896 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.432377100 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.432410955 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.432444096 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.432449102 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.432502985 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.433166981 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.433193922 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.433232069 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.433237076 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.433290005 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.434938908 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.434967995 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.435015917 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.435022116 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.435041904 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.435058117 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.435229063 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.435246944 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.435280085 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.435286045 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.435319901 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.435333967 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.436485052 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.436501980 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.436548948 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.436556101 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.436582088 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.436604023 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.437736034 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.437784910 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.437810898 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.437817097 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.437846899 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.437870026 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.438730955 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.438779116 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.438812971 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.438817978 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.438848019 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.438868046 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.439913034 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.439960957 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.439987898 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.439992905 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.440025091 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.440043926 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.441080093 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.441128969 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.441164970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.441170931 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.441205025 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.441214085 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.442024946 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.442061901 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.442097902 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.442102909 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.442147017 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.442977905 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.443015099 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.443057060 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.443062067 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.443092108 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.443110943 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.443985939 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.444014072 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.444052935 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.444058895 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.444088936 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.444123030 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.445305109 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.445321083 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.445394993 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.445401907 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.445446014 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.446542978 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.446557999 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.446609974 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.446615934 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.446640968 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.446664095 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.447551012 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.447570086 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.447635889 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.447643042 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.447772026 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.448803902 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.448823929 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.448892117 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.448898077 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.448986053 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.449455976 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.449558973 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.449816942 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.449882984 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.450311899 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.450340986 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.450376987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.450381994 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.450407982 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.450424910 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.451098919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.451116085 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.451164961 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.451169968 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.451236010 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.452162981 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.452181101 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.452229977 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.452235937 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.452264071 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.452279091 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.453227997 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.453253984 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.453305960 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.453311920 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.453340054 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.453362942 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.454605103 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.454632044 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.454668045 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.454673052 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.454699993 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.454720974 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.455853939 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.455882072 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.455916882 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.455921888 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.455950022 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.455971003 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.457001925 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.457037926 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.457071066 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.457076073 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.457112074 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.457130909 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458101988 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458129883 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458169937 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458173990 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458200932 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458220959 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458762884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458789110 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458821058 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458825111 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.458859921 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.458874941 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.459863901 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.459903955 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.459932089 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.459937096 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.459960938 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.459989071 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.776855946 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.776887894 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.776933908 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.776964903 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.776979923 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.777154922 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.965167046 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.965204000 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.965269089 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.965297937 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:56.965332985 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:56.965500116 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.059360027 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.059386969 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.059479952 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.059479952 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.059494972 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.059617996 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.153367996 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.153429031 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.153470993 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.153481960 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.153510094 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.153676987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.154162884 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.154212952 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.154253006 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.154258966 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.154283047 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.154366970 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.246846914 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.246896982 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.246959925 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.246988058 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.247021914 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.247771025 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.247983932 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.248048067 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.248089075 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.248095036 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.248127937 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.248424053 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.249099016 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.249142885 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.249193907 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.249200106 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.249232054 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.249327898 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.250715971 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.250770092 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.250806093 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.250812054 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.250844002 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.251024008 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.251197100 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.251245975 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.251283884 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.251288891 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.251312971 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.251390934 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.340481043 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.340511084 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.340595007 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.340595007 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.340607882 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.341409922 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.341439962 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.341475964 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.341484070 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.341509104 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.341737032 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.342827082 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.342854023 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.342889071 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.342895031 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.342941999 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.342942953 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343059063 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343079090 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343148947 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343148947 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343154907 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343240023 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343626976 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343646049 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343684912 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343689919 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.343743086 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.343743086 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.344532967 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.344558954 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.344592094 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.344599009 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.344629049 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.344732046 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.345750093 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.345771074 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.345881939 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.345887899 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.346138000 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.346997023 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.347019911 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.347093105 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.347098112 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.347132921 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.347187996 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.347949982 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.347974062 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.348007917 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.348012924 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.348081112 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.348081112 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.349683046 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.349704027 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.349787951 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.349787951 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.349793911 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.350456953 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.350729942 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.350754023 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.350794077 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.350799084 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.350867987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.350867987 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.350980997 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.351083040 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.351097107 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.351213932 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.355493069 CET	49870	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:19:57.355509996 CET	443	49870	54.237.133.81	192.168.2.4
Mar 18, 2024 17:19:57.499784946 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.499824047 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.499963045 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.500857115 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.500859022 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.500869989 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.500885010 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.501013041 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.501406908 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.501422882 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.742798090 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.742837906 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.742986917 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.743194103 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.743213892 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.745197058 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.745228052 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.745315075 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.745547056 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.745558023 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.781112909 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.781336069 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.781346083 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.782303095 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.782859087 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.782859087 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.782874107 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.782923937 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.783173084 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.783377886 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.783396959 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.783742905 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.784212112 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.784238100 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.784243107 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.784291983 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:57.822084904 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.837481976 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:57.929179907 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.929466963 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.929491997 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.929817915 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.930365086 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.930365086 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.930387020 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.930485010 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.930847883 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.931032896 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.931044102 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.931354046 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.931749105 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.931807995 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:57.932262897 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.978266001 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:57.980241060 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.082336903 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.082495928 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.082556009 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:58.083230972 CET	49874	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:58.083244085 CET	443	49874	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.234656096 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.234757900 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.234826088 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.235172033 CET	49875	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.235192060 CET	443	49875	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.239012957 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.239161015 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.239223003 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.239372015 CET	49876	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.239387035 CET	443	49876	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.729777098 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.729804993 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.729907990 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.730232000 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.730246067 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.732284069 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.732317924 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.732680082 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.733146906 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.733161926 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.878423929 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.878473043 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.878529072 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:58.878551006 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.879101038 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.879148006 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:58.879367113 CET	49873	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:19:58.879380941 CET	443	49873	142.251.40.162	192.168.2.4
Mar 18, 2024 17:19:58.908752918 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:58.908790112 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:58.908874989 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:58.909229994 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:58.909245014 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:58.916249990 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.916476965 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.916486979 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.916811943 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.917121887 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.917179108 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:58.917236090 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.961716890 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:58.961723089 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.108736992 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.109011889 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.109030962 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.109347105 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.109781981 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.109781981 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.109798908 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.109844923 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.151794910 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.220431089 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.220886946 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.220906019 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.221364975 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.221838951 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.221838951 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.221856117 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.221941948 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.222167015 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.222258091 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.222626925 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.222626925 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.266160011 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.345196009 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.345269918 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.345839024 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.346155882 CET	49879	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:19:59.346184015 CET	443	49879	142.250.80.100	192.168.2.4
Mar 18, 2024 17:19:59.351217031 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.351248026 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.351465940 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.351922989 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.351936102 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.499646902 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.499747992 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.499943018 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.520128012 CET	49878	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.520152092 CET	443	49878	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.535785913 CET	49877	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:19:59.535809040 CET	443	49877	104.16.224.240	192.168.2.4
Mar 18, 2024 17:19:59.538966894 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.539787054 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.539813995 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.540144920 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.540693045 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.540693045 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.540707111 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.540752888 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.589268923 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.775577068 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.776546955 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:19:59.776946068 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.779787064 CET	49880	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:19:59.779800892 CET	443	49880	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:01.053935051 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.053977013 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.054104090 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.054454088 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.054466963 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.133227110 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.133263111 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.133447886 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.137901068 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.137912989 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.251847982 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.254342079 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.254362106 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.254740953 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.255289078 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.255353928 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.258054972 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.304243088 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.335159063 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.341944933 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.341957092 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.342587948 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.346278906 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.346394062 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.402026892 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.482212067 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.482393980 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.482754946 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.483037949 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.483047009 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.483176947 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.483247995 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.483304977 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.578306913 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.578360081 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.578581095 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.578846931 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.578912973 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.578919888 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.579137087 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.579149961 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.579195976 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.579229116 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.579235077 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.579262018 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.633517027 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.675735950 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675785065 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675806999 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675822973 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.675829887 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675838947 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675894022 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675916910 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.675924063 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.675935030 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.675992966 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.676012993 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.676043034 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.676078081 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.676121950 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.676127911 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.676151037 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.676160097 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.676202059 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.676316977 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.707582951 CET	49882	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:01.707606077 CET	443	49882	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:01.838093042 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:01.838139057 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:01.838548899 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:01.838753939 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:01.838772058 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.140372992 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.140419006 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.140482903 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.141707897 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.141726971 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.143507004 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.143542051 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.143598080 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.144851923 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.144870996 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.277825117 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.277858019 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.277910948 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.279983044 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.280005932 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.282742023 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.282763958 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.282831907 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.284321070 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.284337997 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.375664949 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.376132011 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.376157045 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.376826048 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.377604961 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.377671003 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.378087997 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.378118992 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.378124952 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.412538052 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.420437098 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.420448065 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.420790911 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.421441078 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.421509027 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.421747923 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.463527918 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.463932037 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.463947058 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.464252949 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.464278936 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.464638948 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.464705944 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.464819908 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.508225918 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.725313902 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.725359917 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.725418091 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.726922035 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.726942062 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.733988047 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.734045982 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.734112024 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.734683037 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.734704971 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.766470909 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.766858101 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.766886950 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.767206907 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.768090963 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.768156052 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.768335104 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.784116983 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.784233093 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.784276009 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.785195112 CET	49887	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.785212040 CET	443	49887	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.803822041 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.803890944 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.803944111 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.804713011 CET	49884	443	192.168.2.4	44.237.140.36
Mar 18, 2024 17:20:02.804732084 CET	443	49884	44.237.140.36	192.168.2.4
Mar 18, 2024 17:20:02.812251091 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.819638014 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:02.819662094 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:02.819708109 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:02.821219921 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:02.821238995 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:02.843621969 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.843734026 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.843777895 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.845622063 CET	49886	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:02.845629930 CET	443	49886	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:02.909949064 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.912621975 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.912638903 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.912966013 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.913629055 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.913697004 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.914428949 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.918426991 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.918915033 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.918948889 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.919929028 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.919997931 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.920605898 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.920671940 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.921107054 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:02.921118021 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.960237026 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:02.963987112 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.044639111 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.044743061 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.045077085 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.045419931 CET	49888	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.045433998 CET	443	49888	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.174257994 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.174590111 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:03.174616098 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.174915075 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.175220966 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:03.175280094 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.175395012 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:03.216236115 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.227965117 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.228018045 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.228096008 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.229809046 CET	49889	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.229830027 CET	443	49889	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.231693983 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.232283115 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.232441902 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.232533932 CET	49890	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:03.232553959 CET	443	49890	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:03.428982019 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.429256916 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:03.429284096 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.429605961 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.430026054 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:03.430093050 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.430236101 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:03.476236105 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.523499966 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.523561001 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.523725033 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:03.557996035 CET	49891	443	192.168.2.4	44.238.198.87
Mar 18, 2024 17:20:03.558010101 CET	443	49891	44.238.198.87	192.168.2.4
Mar 18, 2024 17:20:03.882111073 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.882272005 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.882700920 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.882890940 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:03.884183884 CET	49885	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:03.884238958 CET	443	49885	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:03.895349979 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:03.895375013 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:03.895452023 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:03.896146059 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:03.896161079 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.086615086 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.134438992 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.148452997 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.148459911 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.148849010 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.151304007 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.151370049 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.151843071 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.192245007 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.333302975 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.333451986 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.333499908 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.338562012 CET	49892	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:04.338579893 CET	443	49892	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:04.597508907 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.597568035 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.597636938 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.598793983 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.598814011 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.791111946 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.809931993 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.809951067 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.810314894 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.811100960 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.811165094 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:04.811743975 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:04.856235027 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:05.044392109 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:05.044509888 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:05.047835112 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:05.048046112 CET	49894	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:05.048063993 CET	443	49894	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:07.007492065 CET	49734	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:20:07.007662058 CET	49736	80	192.168.2.4	18.205.222.128
Mar 18, 2024 17:20:07.101181984 CET	80	49736	18.205.222.128	192.168.2.4
Mar 18, 2024 17:20:07.101207018 CET	80	49734	18.205.222.128	192.168.2.4
Mar 18, 2024 17:20:07.172822952 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.172862053 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.172925949 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.173470974 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.173491001 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.180444002 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.224242926 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.322093964 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.322253942 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.322333097 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.323070049 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.323082924 CET	443	49883	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.323092937 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.323162079 CET	49883	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.369123936 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.408849955 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.408876896 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.409285069 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.409732103 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.409797907 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:07.454983950 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:07.860618114 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.860656023 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:07.860713959 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.863367081 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.863380909 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:07.882613897 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.882647991 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:07.882697105 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.882929087 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:07.882944107 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:07.917020082 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:07.917068005 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:07.917129993 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:07.917579889 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:07.917603016 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.100939035 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.119786024 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.119817972 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.120136976 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.128043890 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.128120899 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.131724119 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.131767035 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.132761002 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.132780075 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.133128881 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.133362055 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.133395910 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.133481979 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.133908987 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.133927107 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.134418964 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.134418964 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.134434938 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.134486914 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.159300089 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.159502983 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.159522057 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.159868956 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.160300970 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.160370111 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.160501957 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.176275969 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.179802895 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.208239079 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.241455078 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.412987947 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.413055897 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.413234949 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.414679050 CET	49898	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.414697886 CET	443	49898	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.417855024 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.417900085 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.418365955 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.418479919 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.418807983 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.418807983 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.422508001 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.422544003 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.423031092 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.423379898 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.423396111 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.459404945 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.460091114 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.460222006 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.470125914 CET	49897	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.470140934 CET	443	49897	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.613074064 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.613451958 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.613478899 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.613854885 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.614305973 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.614306927 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.614326954 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.614387989 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.618164062 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.618588924 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.618597984 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.618928909 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.619440079 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.619503021 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.619739056 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.660238981 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.683429956 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.820250988 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.820314884 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.839185953 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.839267969 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.839514017 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.840334892 CET	49900	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:08.840354919 CET	443	49900	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:08.843476057 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.843518019 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:08.843600988 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.843914986 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.843929052 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:08.881470919 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.881575108 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.881778002 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.883683920 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.883724928 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:08.883727074 CET	49899	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:08.883738995 CET	443	49899	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:08.883815050 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.884116888 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:08.884134054 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:08.885768890 CET	49896	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:08.885790110 CET	443	49896	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:08.888179064 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:08.932235003 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:09.035281897 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.035640001 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.035665989 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.036003113 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.036546946 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.036614895 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.036741972 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.075520992 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.084239960 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.104496956 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:09.104727030 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:09.104794025 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:09.105989933 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.106019020 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.106376886 CET	49895	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:09.106391907 CET	443	49895	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:09.106549978 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.108865023 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.108968019 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.131160975 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.131196976 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.131261110 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.131716967 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.131733894 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.151407957 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.288746119 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.288824081 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.288885117 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.289937019 CET	49901	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:09.289961100 CET	443	49901	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:09.328339100 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.328533888 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.328558922 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.328906059 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.329206944 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.329310894 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.329323053 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.370066881 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.370076895 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.568444014 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.568555117 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.568759918 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.569710016 CET	49903	443	192.168.2.4	54.161.241.46
Mar 18, 2024 17:20:09.569735050 CET	443	49903	54.161.241.46	192.168.2.4
Mar 18, 2024 17:20:09.724832058 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.724877119 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.724955082 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.725634098 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.725651026 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.727974892 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.728013039 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.728070974 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.728650093 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.728663921 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.912503004 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.912758112 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.912785053 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.913110018 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.913444042 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.913506985 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.913623095 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:09.956239939 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:09.963064909 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.213490009 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.213874102 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.213895082 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.214227915 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.214736938 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.214736938 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.214756012 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.214802980 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.256274939 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.256336927 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.256793976 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.256876945 CET	49905	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.256896973 CET	443	49905	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.264211893 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.487957954 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.488032103 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:10.488746881 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.488746881 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.798322916 CET	49904	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:10.798346043 CET	443	49904	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:17.717258930 CET	49723	80	192.168.2.4	23.206.121.20
Mar 18, 2024 17:20:17.717327118 CET	49724	80	192.168.2.4	104.102.251.17
Mar 18, 2024 17:20:17.806096077 CET	80	49723	23.206.121.20	192.168.2.4
Mar 18, 2024 17:20:17.806308031 CET	49723	80	192.168.2.4	23.206.121.20
Mar 18, 2024 17:20:17.806386948 CET	80	49724	104.102.251.17	192.168.2.4
Mar 18, 2024 17:20:17.807101965 CET	49724	80	192.168.2.4	104.102.251.17
Mar 18, 2024 17:20:18.727833986 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.727936983 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.728013992 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.728779078 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.728816986 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.734947920 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.735002041 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.735054970 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.736675024 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.736700058 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.798938990 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.798991919 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:18.799048901 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.800268888 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.800323963 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:18.800446987 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.810501099 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.810544968 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:18.811290979 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:18.811322927 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:18.919848919 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.920192957 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.920231104 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.920568943 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.921490908 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.921559095 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:18.921720982 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:18.964245081 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.011640072 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.012424946 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.019700050 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.019730091 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.019941092 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.019983053 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.020081997 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.020335913 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.020867109 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.020874023 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.020930052 CET	443	49908	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.020948887 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.022166967 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.064277887 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.065793991 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:19.065876007 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:19.065965891 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:19.073998928 CET	49908	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.146878958 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.146949053 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.147172928 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.147205114 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.147263050 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.147306919 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.147362947 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.147407055 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.147594929 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.212366104 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.212635040 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.212677956 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.213020086 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.213567019 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.213567019 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.213618040 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.213670015 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.241244078 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.241353035 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.241432905 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.241535902 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.241810083 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.241817951 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.241853952 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.241902113 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.241925955 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.242007971 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.242475033 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.243218899 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.243254900 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.243287086 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.243390083 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.243541002 CET	49907	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.243562937 CET	443	49907	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.262160063 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.339883089 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.339931965 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.339972973 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340015888 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.340053082 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340084076 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.340085030 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.340176105 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340276003 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.340296984 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340698004 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340842962 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.340881109 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.340897083 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.341315985 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.342003107 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.342017889 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.342046022 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.342119932 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.342123985 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.342123985 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.342210054 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.342530012 CET	49909	443	192.168.2.4	54.237.133.81
Mar 18, 2024 17:20:19.342561007 CET	443	49909	54.237.133.81	192.168.2.4
Mar 18, 2024 17:20:19.349806070 CET	49902	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:19.349828005 CET	443	49902	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:19.489423037 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.489538908 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.489665985 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.491214037 CET	49906	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.491228104 CET	443	49906	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.519809961 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.519843102 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.519951105 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.521802902 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.521820068 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.543180943 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:19.543215036 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:19.543275118 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:19.543654919 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:19.543667078 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:19.628756046 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.628784895 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.628882885 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.629339933 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.629358053 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.703056097 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.703095913 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.703232050 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.703617096 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.703634024 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.705491066 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.705528975 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.705789089 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.705789089 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.705827951 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.794111013 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.794394016 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.794424057 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.794784069 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.795222998 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.795222998 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.795241117 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.795289040 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.837867022 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.888447046 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.888674974 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.888689995 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.889107943 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.889506102 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.889506102 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.889524937 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.889580011 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:19.899224997 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.899427891 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.899437904 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.899777889 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.902225018 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.902225018 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:19.902241945 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.902290106 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:19.932849884 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:19.948509932 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.080302954 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.080362082 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.080415010 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.080437899 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.081706047 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.081768036 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.081948996 CET	49910	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.081963062 CET	443	49910	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.082544088 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.082954884 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.082973003 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.083338976 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.083673000 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.083739042 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.083837032 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.083854914 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.083863020 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.086339951 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.086360931 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.086419106 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.086704016 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.086714983 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.192158937 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.192378998 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.192405939 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.192744970 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.193094015 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.193161964 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.193279028 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.213731050 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.213848114 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.213939905 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.214783907 CET	49913	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.214804888 CET	443	49913	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.240233898 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.274771929 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.275068998 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.275093079 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.275444984 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.276940107 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.277003050 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.277206898 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.324232101 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.471195936 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.471302032 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.471385002 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.471631050 CET	49914	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:20.471649885 CET	443	49914	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:20.507564068 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.507648945 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.507688999 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.508044004 CET	49911	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.508059025 CET	443	49911	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.511432886 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.511456966 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.511523008 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.511863947 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:20.511871099 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:20.525156021 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.525331020 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.525377989 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.526374102 CET	49915	443	192.168.2.4	142.250.80.100
Mar 18, 2024 17:20:20.526379108 CET	443	49915	142.250.80.100	192.168.2.4
Mar 18, 2024 17:20:20.529118061 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.529145002 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.529232979 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.529484987 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.529501915 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.605288029 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:20.605324984 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:20.605387926 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:20.605799913 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:20.605820894 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:20.739485979 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.739806890 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.739824057 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.740164995 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.740473986 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.740537882 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.740582943 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.788229942 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:20.792439938 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:20.833729029 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.833877087 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:20.833921909 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.834532022 CET	49912	443	192.168.2.4	142.251.40.162
Mar 18, 2024 17:20:20.834547997 CET	443	49912	142.251.40.162	192.168.2.4
Mar 18, 2024 17:20:21.006042004 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:21.006114960 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:21.006422997 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:21.006886959 CET	49917	443	192.168.2.4	142.250.80.68
Mar 18, 2024 17:20:21.006905079 CET	443	49917	142.250.80.68	192.168.2.4
Mar 18, 2024 17:20:21.045176029 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.052855968 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.052871943 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.053222895 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.053827047 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.053827047 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.053885937 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.053914070 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.096241951 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.099323034 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.139252901 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.139568090 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.139611959 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.139967918 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.140525103 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.140604019 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.140778065 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.182615042 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.182631969 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.317811012 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.317866087 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.318073034 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.318798065 CET	49918	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.318833113 CET	443	49918	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.462243080 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.462323904 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.463923931 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.464073896 CET	49916	443	192.168.2.4	52.34.230.154
Mar 18, 2024 17:20:21.464086056 CET	443	49916	52.34.230.154	192.168.2.4
Mar 18, 2024 17:20:21.468229055 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.468266964 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.468435049 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.468622923 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.468636036 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.826445103 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.826890945 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.826910973 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.827261925 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.827997923 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.827997923 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:21.828063011 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:21.869240999 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:22.180895090 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:22.180962086 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:22.183815002 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:22.249560118 CET	49919	443	192.168.2.4	44.224.37.210
Mar 18, 2024 17:20:22.249582052 CET	443	49919	44.224.37.210	192.168.2.4
Mar 18, 2024 17:20:22.936573982 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.936609030 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.936754942 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.937510967 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.937526941 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.939615965 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.939656019 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.939784050 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.940438032 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.940454006 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.977968931 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.978010893 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.978066921 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.981298923 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.981318951 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.985229015 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.985259056 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:22.985315084 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.986474037 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:22.986490011 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.119760990 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.123059988 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.123080015 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.123434067 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.124166012 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.124243021 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.124541998 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.164807081 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.166855097 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.166889906 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.168267012 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.168335915 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.169060946 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.169156075 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.169437885 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.169456005 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.169476032 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.169751883 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.169774055 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.170872927 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.170924902 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.171979904 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.172044992 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.172101974 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.172238111 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.213530064 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.213547945 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.214412928 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.260493994 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.422173977 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.427054882 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.427073956 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.427434921 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.427874088 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.427942038 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.428029060 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.441081047 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.441138029 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.441196918 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.441458941 CET	49920	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.441477060 CET	443	49920	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.468271971 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.469739914 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.469856024 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.469917059 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.470078945 CET	49922	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.470094919 CET	443	49922	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.477091074 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.477153063 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.477195978 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.477457047 CET	49923	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.477473974 CET	443	49923	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.712824106 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.712877989 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:23.712927103 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.714591026 CET	49921	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:23.714610100 CET	443	49921	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.719491959 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.719521046 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.719613075 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.720261097 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.720276117 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.721726894 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.721756935 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.721906900 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.722070932 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.722100019 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.723645926 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.723648071 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.723659992 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.723663092 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.723735094 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.723735094 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.723923922 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.723933935 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.724226952 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.724237919 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.902301073 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.902576923 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.902585983 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.902915955 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.903831005 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.903831005 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.903842926 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.903893948 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.946280956 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.946502924 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.946515083 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.947014093 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.947406054 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.947424889 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.947670937 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.947781086 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948144913 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948144913 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948158026 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.948205948 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.948460102 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.948695898 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948976994 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948976994 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.948991060 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.949039936 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.949290991 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.995774984 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.995785952 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:28.995812893 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:28.995820999 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.042145014 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.042146921 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.214608908 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.214673996 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.214708090 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.215257883 CET	49924	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.215275049 CET	443	49924	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.238308907 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.238527060 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.238542080 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.238867044 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.239231110 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.239289999 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.239327908 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.248505116 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.248627901 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.248682022 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.248857021 CET	49927	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.248871088 CET	443	49927	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.264022112 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.264081001 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.264240026 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.264297009 CET	49926	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.264307976 CET	443	49926	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.280240059 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.291706085 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.512242079 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.512306929 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:29.512393951 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.512649059 CET	49925	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:29.512661934 CET	443	49925	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.721468925 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.721498013 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.721560955 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.722024918 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.722039938 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.724265099 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.724298954 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.724378109 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.724637985 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.724662066 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.908617973 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.908854008 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.908866882 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.909193993 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.909624100 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.909686089 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:32.909750938 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.949415922 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:32.949433088 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.206458092 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.206758022 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.206778049 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.207135916 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.207518101 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.207603931 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.207717896 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.218935013 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.218996048 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.219284058 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.219352961 CET	49929	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.219363928 CET	443	49929	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.252243996 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.499190092 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.499255896 CET	443	49928	104.16.224.240	192.168.2.4
Mar 18, 2024 17:20:33.499597073 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.499665976 CET	49928	443	192.168.2.4	104.16.224.240
Mar 18, 2024 17:20:33.499679089 CET	443	49928	104.16.224.240	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2024 17:19:04.517400980 CET	53	55943	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:04.529479980 CET	53	56099	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:05.101311922 CET	53	61640	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:05.937793970 CET	50000	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:05.938096046 CET	53988	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:06.115746975 CET	53	53988	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:06.115770102 CET	53	50000	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:06.317595959 CET	54710	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:06.317790031 CET	61218	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:06.435718060 CET	53	61218	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:06.462507963 CET	53	54710	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:06.900352955 CET	61420	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:06.900791883 CET	55470	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:06.989001989 CET	53	55470	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:06.989394903 CET	53	61420	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.701455116 CET	53	65524	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.763566017 CET	53	52827	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.789241076 CET	60790	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.789844990 CET	50349	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.825963974 CET	64568	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.826991081 CET	56207	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.830219984 CET	58501	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.831327915 CET	59185	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:07.877842903 CET	53	60790	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.884627104 CET	53	50349	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.887115955 CET	53	50466	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.918231964 CET	53	58501	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.919914007 CET	53	59185	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.939692974 CET	53	64568	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:07.939976931 CET	53	56207	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.831525087 CET	56197	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.831831932 CET	57643	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.840996981 CET	58178	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.841240883 CET	64417	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.893189907 CET	54581	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.893631935 CET	58997	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.919433117 CET	53	56197	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.919899940 CET	53	57643	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.925179958 CET	59551	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.925843000 CET	63893	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.928646088 CET	53	64417	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.929039955 CET	53	58178	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.965673923 CET	61102	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.966145039 CET	54986	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:08.984263897 CET	53	54581	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:08.984283924 CET	53	58997	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.013629913 CET	53	59551	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.013674021 CET	53	63893	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.053628922 CET	53	54986	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.053783894 CET	53	61102	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.111303091 CET	52999	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:09.113771915 CET	51649	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:09.221879005 CET	53	52999	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:09.228616953 CET	53	51649	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:10.013854027 CET	63570	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:10.015660048 CET	51161	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:10.101983070 CET	53	63570	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:10.103082895 CET	53	51161	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.207680941 CET	62376	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.207968950 CET	64099	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.242398024 CET	51944	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.242860079 CET	59791	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.250407934 CET	59900	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.250829935 CET	64385	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:12.295852900 CET	53	64099	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.295970917 CET	53	62376	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.329778910 CET	53	51944	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.330456018 CET	53	59791	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.339541912 CET	53	59900	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:12.436568022 CET	53	64385	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:21.713941097 CET	53	60264	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:24.652040005 CET	53	49935	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:27.828743935 CET	53	59967	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:29.328134060 CET	138	138	192.168.2.4	192.168.2.255
Mar 18, 2024 17:19:35.312447071 CET	60844	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:35.313066959 CET	64368	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:19:35.402117968 CET	53	64368	1.1.1.1	192.168.2.4
Mar 18, 2024 17:19:43.395342112 CET	53	61636	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:04.074069977 CET	53	49973	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:05.989331007 CET	53	58199	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:18.882922888 CET	53	62536	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:18.893035889 CET	53	55468	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:19.452035904 CET	54050	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:19.454233885 CET	53348	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:19.536223888 CET	53396	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:19.536772013 CET	64575	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:19.541882992 CET	53	53348	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:19.541902065 CET	53	54050	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:19.627470970 CET	53	53396	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:19.628274918 CET	53	64575	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:20.515368938 CET	58004	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:20.515738010 CET	56156	53	192.168.2.4	1.1.1.1
Mar 18, 2024 17:20:20.604371071 CET	53	56156	1.1.1.1	192.168.2.4
Mar 18, 2024 17:20:20.604782104 CET	53	58004	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 18, 2024 17:19:12.436631918 CET	192.168.2.4	1.1.1.1	c21b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 18, 2024 17:19:05.937793970 CET	192.168.2.4	1.1.1.1	0x87d	Standard query (0)	surveynuts.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:05.938096046 CET	192.168.2.4	1.1.1.1	0xa56e	Standard query (0)	surveynuts.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:06.317595959 CET	192.168.2.4	1.1.1.1	0xd037	Standard query (0)	surveynuts.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.317790031 CET	192.168.2.4	1.1.1.1	0xfb6c	Standard query (0)	surveynuts.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:06.900352955 CET	192.168.2.4	1.1.1.1	0xe798	Standard query (0)	nel.heroku.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.900791883 CET	192.168.2.4	1.1.1.1	0xa9c8	Standard query (0)	nel.heroku.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:07.789241076 CET	192.168.2.4	1.1.1.1	0x88c6	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.789844990 CET	192.168.2.4	1.1.1.1	0xefc6	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:07.825963974 CET	192.168.2.4	1.1.1.1	0xd6e9	Standard query (0)	snuts.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.826991081 CET	192.168.2.4	1.1.1.1	0x8e4a	Standard query (0)	snuts.s3.amazonaws.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:07.830219984 CET	192.168.2.4	1.1.1.1	0x2b7f	Standard query (0)	static.getclicky.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.831327915 CET	192.168.2.4	1.1.1.1	0x42ec	Standard query (0)	static.getclicky.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:08.831525087 CET	192.168.2.4	1.1.1.1	0x7e2f	Standard query (0)	in.getclicky.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.831831932 CET	192.168.2.4	1.1.1.1	0x166e	Standard query (0)	in.getclicky.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:08.840996981 CET	192.168.2.4	1.1.1.1	0xc017	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.841240883 CET	192.168.2.4	1.1.1.1	0xc07e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:08.893189907 CET	192.168.2.4	1.1.1.1	0x891	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.893631935 CET	192.168.2.4	1.1.1.1	0x1376	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:19:08.925179958 CET	192.168.2.4	1.1.1.1	0x8fcf	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.925843000 CET	192.168.2.4	1.1.1.1	0x7bc	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:19:08.965673923 CET	192.168.2.4	1.1.1.1	0x1599	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.966145039 CET	192.168.2.4	1.1.1.1	0x4210	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:09.111303091 CET	192.168.2.4	1.1.1.1	0xe5eb	Standard query (0)	snuts.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.113771915 CET	192.168.2.4	1.1.1.1	0xca13	Standard query (0)	snuts.s3.amazonaws.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:10.013854027 CET	192.168.2.4	1.1.1.1	0x82c7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:10.015660048 CET	192.168.2.4	1.1.1.1	0xad73	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:12.207680941 CET	192.168.2.4	1.1.1.1	0x7ec	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.207968950 CET	192.168.2.4	1.1.1.1	0xd9f7	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:12.242398024 CET	192.168.2.4	1.1.1.1	0x660b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.242860079 CET	192.168.2.4	1.1.1.1	0x480a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:12.250407934 CET	192.168.2.4	1.1.1.1	0x4e86	Standard query (0)	surveynuts.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.250829935 CET	192.168.2.4	1.1.1.1	0xd6f2	Standard query (0)	surveynuts.com	65	IN (0x0001)	false
Mar 18, 2024 17:19:35.312447071 CET	192.168.2.4	1.1.1.1	0x9f3f	Standard query (0)	static.filestackapi.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:35.313066959 CET	192.168.2.4	1.1.1.1	0xec11	Standard query (0)	static.filestackapi.com	65	IN (0x0001)	false
Mar 18, 2024 17:20:19.452035904 CET	192.168.2.4	1.1.1.1	0x90b	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.454233885 CET	192.168.2.4	1.1.1.1	0x3f49	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Mar 18, 2024 17:20:19.536223888 CET	192.168.2.4	1.1.1.1	0x733c	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.536772013 CET	192.168.2.4	1.1.1.1	0x11f3	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 18, 2024 17:20:20.515368938 CET	192.168.2.4	1.1.1.1	0x6822	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.515738010 CET	192.168.2.4	1.1.1.1	0x64a0	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 18, 2024 17:19:06.115770102 CET	1.1.1.1	192.168.2.4	0x87d	No error (0)	surveynuts.com		18.205.222.128	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.115770102 CET	1.1.1.1	192.168.2.4	0x87d	No error (0)	surveynuts.com		54.161.241.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.115770102 CET	1.1.1.1	192.168.2.4	0x87d	No error (0)	surveynuts.com		54.237.133.81	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.115770102 CET	1.1.1.1	192.168.2.4	0x87d	No error (0)	surveynuts.com		52.202.168.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.462507963 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	surveynuts.com		54.237.133.81	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.462507963 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	surveynuts.com		52.202.168.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.462507963 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	surveynuts.com		54.161.241.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.462507963 CET	1.1.1.1	192.168.2.4	0xd037	No error (0)	surveynuts.com		18.205.222.128	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		52.55.185.246	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		34.250.78.125	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		54.76.205.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		54.154.103.107	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		44.215.77.56	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:06.989394903 CET	1.1.1.1	192.168.2.4	0xe798	No error (0)	nel.heroku.com		54.208.248.98	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.877842903 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	cdn.amplitude.com		18.164.115.48	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.877842903 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	cdn.amplitude.com		18.164.115.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.877842903 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	cdn.amplitude.com		18.164.115.7	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.877842903 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	cdn.amplitude.com		18.164.115.222	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.918231964 CET	1.1.1.1	192.168.2.4	0x2b7f	No error (0)	static.getclicky.com		104.16.225.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.918231964 CET	1.1.1.1	192.168.2.4	0x2b7f	No error (0)	static.getclicky.com		104.16.224.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.919914007 CET	1.1.1.1	192.168.2.4	0x42ec	No error (0)	static.getclicky.com			65	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	snuts.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.230.225	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.122.25	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.137.196	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.44.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.2.1	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.93.43	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.171.233	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939692974 CET	1.1.1.1	192.168.2.4	0xd6e9	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.66.137	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939976931 CET	1.1.1.1	192.168.2.4	0x8e4a	No error (0)	snuts.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:07.939976931 CET	1.1.1.1	192.168.2.4	0x8e4a	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:08.919433117 CET	1.1.1.1	192.168.2.4	0x7e2f	No error (0)	in.getclicky.com		104.16.224.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.919433117 CET	1.1.1.1	192.168.2.4	0x7e2f	No error (0)	in.getclicky.com		104.16.225.240	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.919899940 CET	1.1.1.1	192.168.2.4	0x166e	No error (0)	in.getclicky.com			65	IN (0x0001)	false
Mar 18, 2024 17:19:08.928646088 CET	1.1.1.1	192.168.2.4	0xc07e	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 18, 2024 17:19:08.929039955 CET	1.1.1.1	192.168.2.4	0xc017	No error (0)	www.google.com		142.250.80.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.984263897 CET	1.1.1.1	192.168.2.4	0x891	No error (0)	googleads.g.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:08.984283924 CET	1.1.1.1	192.168.2.4	0x1376	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 18, 2024 17:19:09.013629913 CET	1.1.1.1	192.168.2.4	0x8fcf	No error (0)	td.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		44.237.140.36	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		35.81.203.27	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		35.85.102.24	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		34.217.235.208	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		52.27.181.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		35.164.164.159	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		54.191.137.199	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.053783894 CET	1.1.1.1	192.168.2.4	0x1599	No error (0)	api.amplitude.com		35.167.65.36	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	snuts.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.202.161	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.168.225	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.200.41	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.128.233	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.75	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.10.223	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.213	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.221879005 CET	1.1.1.1	192.168.2.4	0xe5eb	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.112.241	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:09.228616953 CET	1.1.1.1	192.168.2.4	0xca13	No error (0)	snuts.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:09.228616953 CET	1.1.1.1	192.168.2.4	0xca13	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:10.101983070 CET	1.1.1.1	192.168.2.4	0x82c7	No error (0)	www.google.com		142.250.80.100	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:10.103082895 CET	1.1.1.1	192.168.2.4	0xad73	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		44.238.198.87	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		44.224.23.227	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		54.69.165.92	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		35.164.242.217	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		52.41.35.115	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		52.38.248.9	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		35.160.255.210	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.295970917 CET	1.1.1.1	192.168.2.4	0x7ec	No error (0)	api.amplitude.com		52.38.117.118	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.329778910 CET	1.1.1.1	192.168.2.4	0x660b	No error (0)	www.google.com		142.250.80.68	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.330456018 CET	1.1.1.1	192.168.2.4	0x480a	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 18, 2024 17:19:12.339541912 CET	1.1.1.1	192.168.2.4	0x4e86	No error (0)	surveynuts.com		54.161.241.46	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.339541912 CET	1.1.1.1	192.168.2.4	0x4e86	No error (0)	surveynuts.com		52.202.168.65	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.339541912 CET	1.1.1.1	192.168.2.4	0x4e86	No error (0)	surveynuts.com		54.237.133.81	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:12.339541912 CET	1.1.1.1	192.168.2.4	0x4e86	No error (0)	surveynuts.com		18.205.222.128	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:22.313693047 CET	1.1.1.1	192.168.2.4	0xd092	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:22.313693047 CET	1.1.1.1	192.168.2.4	0xd092	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:35.402117968 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	static.filestackapi.com	www.filestackapi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:35.402117968 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	www.filestackapi.com	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:35.402412891 CET	1.1.1.1	192.168.2.4	0x9f3f	No error (0)	static.filestackapi.com	www.filestackapi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:35.402412891 CET	1.1.1.1	192.168.2.4	0x9f3f	No error (0)	www.filestackapi.com	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:35.664696932 CET	1.1.1.1	192.168.2.4	0xf76c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:35.664696932 CET	1.1.1.1	192.168.2.4	0xf76c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:19:58.504435062 CET	1.1.1.1	192.168.2.4	0x282c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:19:58.504435062 CET	1.1.1.1	192.168.2.4	0x282c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.226238966 CET	1.1.1.1	192.168.2.4	0x74d5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 18, 2024 17:20:19.226238966 CET	1.1.1.1	192.168.2.4	0x74d5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		52.34.230.154	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		35.161.183.201	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		34.216.49.176	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		35.167.229.244	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		52.34.7.136	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		44.230.216.187	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		54.149.202.222	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.541902065 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	api.amplitude.com		54.68.36.53	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:19.627470970 CET	1.1.1.1	192.168.2.4	0x733c	No error (0)	td.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		44.224.37.210	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		44.236.56.181	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		52.33.103.206	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		52.37.12.180	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		52.33.217.92	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		35.83.216.51	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		34.213.219.185	A (IP address)	IN (0x0001)	false
Mar 18, 2024 17:20:20.604782104 CET	1.1.1.1	192.168.2.4	0x6822	No error (0)	api.amplitude.com		44.240.143.196	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

surveynuts.com

nel.heroku.com

https:

cdn.amplitude.com

static.getclicky.com

snuts.s3.amazonaws.com

in.getclicky.com

googleads.g.doubleclick.net

td.doubleclick.net

api.amplitude.com

www.google.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	18.205.222.128	80	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:19:06.218800068 CET	429	OUT	GET / HTTP/1.1 Host: surveynuts.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 18, 2024 17:19:06.315160036 CET	687	IN	HTTP/1.1 301 Moved Permanently Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:06 GMT Content-Type: text/html Location: https://surveynuts.com/ Via: 1.1 vegur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	18.205.222.128	80	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:19:51.211700916 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	18.205.222.128	80	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2024 17:19:51.325191975 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:06 UTC	657	OUT	GET / HTTP/1.1 Host: surveynuts.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:06 UTC	897	IN	HTTP/1.1 301 Moved Permanently Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:06 GMT X-Frame-Options: ALLOWALL Location: https://surveynuts.com/en Content-Type: text/html; charset=utf-8 Cache-Control: no-cache X-Request-Id: 42c892eb-1375-4b93-aeae-276403f474cc X-Runtime: 0.003640 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:06 UTC	91	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 2f 65 6e 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body>You are being <a href="https://surveynuts.com/en">redirected</a>.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:07 UTC	659	OUT	GET /en HTTP/1.1 Host: surveynuts.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:07 UTC	1147	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778747&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=EA%2BVFuCpjjxgLQb%2BVCU2rfLQL6SBEVQLJpJap7QUmkA%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778747&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=EA%2BVFuCpjjxgLQb%2BVCU2rfLQL6SBEVQLJpJap7QUmkA%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:07 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"b1de89170874dd2cacdce3a755cd1bfb" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; path=/; secure; HttpOnly X-Request-Id: 43c8dfbf-757c-4e3c-8584-499e903ab015 X-Runtime: 0.017435 Vary: Accept-Encoding
2024-03-18 16:19:07 UTC	63	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 56 69 61 3a 20 31 2e 31 20 76 65 67 75 72 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=31536000Via: 1.1 vegur
2024-03-18 16:19:07 UTC	3558	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 4d 61 6b 65 72 2c 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 51 75 65 73 74 69 6f 6e 6e 61 69 72 65 20 43 72 65 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d Data Ascii: <!DOCTYPE html><html><head><title>Survey Maker, Free Online Questionnaire Creator</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale =
2024-03-18 16:19:07 UTC	4744	IN	Data Raw: 68 6f 75 72 22 2c 22 6f 74 68 65 72 22 3a 22 61 62 6f 75 74 20 25 7b 63 6f 75 6e 74 7d 20 68 6f 75 72 73 22 7d 2c 22 78 5f 64 61 79 73 22 3a 7b 22 6f 6e 65 22 3a 22 31 20 64 61 79 22 2c 22 6f 74 68 65 72 22 3a 22 25 7b 63 6f 75 6e 74 7d 20 64 61 79 73 22 7d 2c 22 61 62 6f 75 74 5f 78 5f 6d 6f 6e 74 68 73 22 3a 7b 22 6f 6e 65 22 3a 22 61 62 6f 75 74 20 31 20 6d 6f 6e 74 68 22 2c 22 6f 74 68 65 72 22 3a 22 61 62 6f 75 74 20 25 7b 63 6f 75 6e 74 7d 20 6d 6f 6e 74 68 73 22 7d 2c 22 78 5f 6d 6f 6e 74 68 73 22 3a 7b 22 6f 6e 65 22 3a 22 31 20 6d 6f 6e 74 68 22 2c 22 6f 74 68 65 72 22 3a 22 25 7b 63 6f 75 6e 74 7d 20 6d 6f 6e 74 68 73 22 7d 2c 22 61 62 6f 75 74 5f 78 5f 79 65 61 72 73 22 3a 7b 22 6f 6e 65 22 3a 22 61 62 6f 75 74 20 31 20 79 65 61 72 22 2c 22 6f Data Ascii: hour","other":"about %{count} hours"},"x_days":{"one":"1 day","other":"%{count} days"},"about_x_months":{"one":"about 1 month","other":"about %{count} months"},"x_months":{"one":"1 month","other":"%{count} months"},"about_x_years":{"one":"about 1 year","o
2024-03-18 16:19:07 UTC	5930	IN	Data Raw: 22 66 65 61 74 38 5f 74 69 74 6c 65 22 3a 22 50 69 63 6b 20 79 6f 75 72 20 74 68 65 6d 65 22 2c 22 66 65 61 74 38 5f 64 65 73 63 22 3a 22 57 65 20 63 75 72 72 65 6e 74 6c 79 20 68 61 76 65 20 63 6c 6f 73 65 20 74 6f 20 61 20 64 6f 7a 65 6e 20 64 65 73 69 67 6e 20 74 68 65 6d 65 73 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 66 72 6f 6d 2e 20 53 6f 6d 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 76 65 72 79 20 66 6f 72 6d 61 6c 20 61 6e 64 20 6d 69 6e 69 6d 61 6c 20 62 6c 61 63 6b 20 5c 75 30 30 32 36 20 77 68 69 74 65 20 64 65 73 69 67 6e 2c 20 62 75 74 20 6f 74 68 65 72 73 20 77 69 6c 6c 20 74 6f 74 61 6c 6c 79 20 72 6f 63 6b 20 77 69 74 68 20 73 70 65 63 69 61 6c 20 66 6f 6e 74 73 20 61 6e 64 20 73 65 78 79 20 63 6f 6c 6f 72 73 20 21 20 59 6f 75 20 63 Data Ascii: "feat8_title":"Pick your theme","feat8_desc":"We currently have close to a dozen design themes you can choose from. Some will have a very formal and minimal black \u0026 white design, but others will totally rock with special fonts and sexy colors ! You c
2024-03-18 16:19:07 UTC	7116	IN	Data Raw: 76 61 74 65 22 3a 22 59 6f 75 72 20 73 75 72 76 65 79 20 69 73 20 70 72 69 76 61 74 65 22 2c 22 79 6f 75 72 5f 73 75 72 76 65 79 5f 69 73 5f 70 75 62 6c 69 63 22 3a 22 59 6f 75 72 20 73 75 72 76 65 79 20 69 73 20 70 75 62 6c 69 63 22 2c 22 6d 61 6b 65 5f 69 74 5f 70 75 62 6c 69 63 22 3a 22 4d 61 6b 65 20 69 74 20 70 75 62 6c 69 63 22 2c 22 6d 61 6b 65 5f 69 74 5f 70 72 69 76 61 74 65 22 3a 22 4d 61 6b 65 20 69 74 20 70 72 69 76 61 74 65 22 2c 22 63 61 6e 74 5f 6d 6f 64 69 66 79 5f 64 65 73 69 67 6e 22 3a 22 49 74 20 64 6f 65 73 20 6e 6f 74 20 73 65 65 6d 20 6c 69 6b 65 20 79 6f 75 20 61 72 65 20 74 68 65 20 63 72 65 61 74 6f 72 20 6f 66 20 74 68 69 73 20 73 75 72 76 65 79 2e 20 59 6f 75 20 63 61 6e 27 74 20 6d 6f 64 69 66 79 20 69 74 73 20 64 65 73 69 67 Data Ascii: vate":"Your survey is private","your_survey_is_public":"Your survey is public","make_it_public":"Make it public","make_it_private":"Make it private","cant_modify_design":"It does not seem like you are the creator of this survey. You can't modify its desig
2024-03-18 16:19:07 UTC	668	IN	Data Raw: 22 64 65 6c 65 74 65 5f 61 63 74 69 6f 6e 22 3a 22 44 65 6c 65 74 65 22 2c 22 63 68 61 6e 67 65 5f 61 63 74 69 6f 6e 22 3a 22 43 68 61 6e 67 65 22 2c 22 65 78 70 6f 72 74 5f 61 63 74 69 6f 6e 22 3a 22 45 78 70 6f 72 74 22 2c 22 6c 6f 67 69 63 5f 61 63 74 69 6f 6e 22 3a 22 4c 6f 67 69 63 22 2c 22 73 75 62 6d 69 74 5f 61 63 74 69 6f 6e 22 3a 22 53 75 62 6d 69 74 22 2c 22 69 6e 64 69 76 69 64 75 61 6c 22 3a 22 56 6f 74 65 72 73 22 2c 22 67 6f 5f 74 6f 5f 73 75 72 76 65 79 22 3a 22 56 69 65 77 22 2c 22 65 6d 62 65 64 5f 73 75 72 76 65 79 22 3a 22 57 61 6e 74 20 74 6f 20 65 6d 62 65 64 20 74 68 69 73 20 73 75 72 76 65 79 20 64 69 72 65 63 74 6c 79 20 69 6e 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 6f 72 20 62 6c 6f 67 20 3f 20 43 6f 70 79 20 61 6e 64 20 70 61 Data Ascii: "delete_action":"Delete","change_action":"Change","export_action":"Export","logic_action":"Logic","submit_action":"Submit","individual":"Voters","go_to_survey":"View","embed_survey":"Want to embed this survey directly in your website or blog ? Copy and pa
2024-03-18 16:19:07 UTC	9488	IN	Data Raw: 77 20 64 61 79 73 2e 20 44 6f 6e 27 74 20 6d 69 73 73 20 69 74 20 21 29 22 2c 22 74 65 73 74 5f 70 72 69 63 69 6e 67 32 22 3a 22 54 68 69 73 20 69 73 20 61 20 6f 6e 65 2d 6f 66 66 20 70 61 79 6d 65 6e 74 20 67 69 76 69 6e 67 20 79 6f 75 20 61 63 63 63 65 73 73 20 74 6f 20 61 20 70 72 65 6d 69 75 6d 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 6c 69 66 65 20 21 20 54 68 69 73 20 69 73 20 4e 4f 54 20 61 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 6c 69 6b 65 20 6f 74 68 65 72 20 65 78 70 65 6e 73 69 76 65 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 73 2e 2e 2e 22 2c 22 73 6f 63 69 61 6c 70 61 79 22 3a 22 46 72 65 65 20 61 6c 74 65 72 6e 61 74 69 76 65 20 3a 20 69 66 20 79 6f 75 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 70 61 79 2c 20 67 65 74 20 61 20 70 72 Data Ascii: w days. Don't miss it !)","test_pricing2":"This is a one-off payment giving you acccess to a premium account for life ! This is NOT a subscription like other expensive survey softwares...","socialpay":"Free alternative : if you don't want to pay, get a pr
2024-03-18 16:19:07 UTC	10488	IN	Data Raw: 71 75 69 7a 7a 32 22 3a 22 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 74 72 61 6e 73 66 6f 72 6d 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 20 69 6e 74 6f 20 61 20 71 75 69 7a 2c 20 65 69 74 68 65 72 20 66 6f 72 20 65 64 75 63 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 20 6f 72 20 66 6f 72 20 70 75 62 6c 69 73 68 69 6e 67 20 66 75 6e 20 63 6f 6e 74 65 6e 74 20 66 6f 72 20 79 6f 75 72 20 61 75 64 69 65 6e 63 65 2e 20 53 65 6c 65 63 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 71 75 69 7a 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 65 74 20 75 70 20 61 6e 64 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 63 72 65 61 74 69 6e 67 20 72 65 73 75 6c 74 73 20 70 72 6f 66 69 6c 65 73 20 61 6e 64 20 61 73 73 69 67 6e 69 6e 67 Data Ascii: quizz2":"In this section, you can transform your questionnaire into a quiz, either for education purposes or for publishing fun content for your audience. Select the type of quiz you want to set up and you can start creating results profiles and assigning
2024-03-18 16:19:07 UTC	11860	IN	Data Raw: 73 74 69 6f 6e 6e 61 69 72 65 73 2c 20 67 61 74 68 65 72 20 61 6e 73 77 65 72 73 2c 20 61 6e 64 20 76 69 65 77 20 72 65 73 75 6c 74 73 20 67 72 61 70 68 69 63 61 6c 6c 79 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: stionnaires, gather answers, and view results graphically in real-time."><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="viewport" content="width=device-width, init
2024-03-18 16:19:07 UTC	10156	IN	Data Raw: 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 31 5f 73 69 64 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 77 69 64 74 68 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 63 6f 6c 6f 72 3a 23 31 30 31 30 32 30 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 33 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 5f 70 69 63 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 35 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6f 76 65 72 66 Data Ascii: :30px;margin-top:20px;}.hp_howto1_side{float:left;min-height:150px;width:50%;padding:10px;}.hp_howto2{font-size:30px;font-weight:900;color:#101020;}.hp_howto3{padding-top:20px;}.hp_howto_pic{float:left;height:100%;width:50%;box-sizing:border-box;overf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	52.55.185.246	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:07 UTC	490	OUT	OPTIONS /reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D HTTP/1.1 Host: nel.heroku.com Connection: keep-alive Origin: https://surveynuts.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:07 UTC	423	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://surveynuts.com Access-Control-Max-Age: 7200 Content-Length: 0 Date: Mon, 18 Mar 2024 16:19:07 GMT Strict-Transport-Security: max-age=31536000 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Via: 1.1 spaces-router (devel) Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	52.55.185.246	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:07 UTC	433	OUT	POST /reports?ts=1710778746&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=TljqWt%2BR7YPuX7mbRJYZtXpSbKgqZ4LDOXV9BGygWFE%3D HTTP/1.1 Host: nel.heroku.com Connection: keep-alive Content-Length: 378 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:07 UTC	378	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 38 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 35 34 2e 32 33 37 2e 31 33 33 2e 38 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 33 30 31 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 2f 22 2c 22 75 73 65 72 Data Ascii: [{"age":1,"body":{"elapsed_time":580,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.005,"server_ip":"54.237.133.81","status_code":301,"type":"ok"},"type":"network-error","url":"https://surveynuts.com/","user
2024-03-18 16:19:07 UTC	248	IN	HTTP/1.1 204 No Content Content-Type: text/plain; charset=utf-8 Date: Mon, 18 Mar 2024 16:19:07 GMT Strict-Transport-Security: max-age=31536000 Vary: Origin Via: 1.1 spaces-router (devel) X-Content-Type-Options: nosniff Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	18.164.115.48	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:08 UTC	574	OUT	GET /libs/amplitude-5.2.2-min.gz.js HTTP/1.1 Host: cdn.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://surveynuts.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:08 UTC	748	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 17889 Connection: close Date: Mon, 18 Mar 2024 16:19:09 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Mon, 21 Oct 2019 15:45:34 GMT ETag: "b568e7b3c9d94da6a1d4845b18400f7a" Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: aZB1RIRJqET7nosqRtOBVideRuh0jIV6 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 7edae070a6a25cc68c970c1111701a20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: q7N405EGP2B7MuTS_DhY2hChdihAeXnHKC_cojP4ayrCOGCGcJDIBg==
2024-03-18 16:19:08 UTC	15636	IN	Data Raw: 1f 8b 08 00 4b ab 9e 5c 00 03 cd bd 6b 77 da 48 b3 30 fa fd fc 0a ac 3d db 23 05 41 10 37 db 22 0a cb 49 9c 8c 9f 89 9d 4c ec 64 e6 79 80 f1 92 a1 01 8d 41 22 92 f0 25 16 fb b7 bf 55 7d 53 eb 02 71 66 f6 39 e7 5d 2b 31 52 ab ba ba bb aa ba aa ba fa b6 37 5d fb e3 d8 0b 7c 9d 98 b1 f1 a8 05 d7 7f 91 71 ac 39 4e fc b0 22 c1 b4 42 ee 57 41 18 47 fb fb da da 9f 90 a9 e7 93 89 b6 27 3e 2e 83 c9 7a 41 fa ec a7 ce 41 9d 58 37 6c 4d a0 4d 31 b1 dc fb fb ec b7 ee 2e 27 7d f6 a8 c7 86 ad 13 87 24 49 44 16 53 03 be ac 16 5e bc 9e 10 c4 b4 d1 e3 b9 17 99 b2 96 50 c5 75 44 2a 51 1c 7a 50 cd 9e 48 af c4 3a 31 1e 43 12 af 43 5f 8f 9d 92 e2 2f 1e 96 d7 c1 02 da 11 d1 87 fc 87 ba 17 93 d0 8d 83 b0 9f 12 44 20 ac 08 5a 6c ec 92 8f d0 a4 1d c5 91 fa 38 f0 a1 b6 eb 31 e0 76 Data Ascii: K\kwH0=#A7"ILdyA"%U}Sqf9]+1R7]\|q9N"BWAG'>.zAAX7lMM1.'}$IDS^PuD*QzPH:1CC_/D Zl81v
2024-03-18 16:19:08 UTC	2253	IN	Data Raw: fb 7b 59 77 05 ad 7f ae d1 63 10 ec 70 5b b3 cb 5b 5d 92 05 db 5d 70 b5 28 dc f1 62 a1 97 78 4d cc 6d 3a cb bb 4d 72 b5 31 bd 9d 22 56 26 de 7c 31 f1 06 de f1 00 3f e0 35 06 25 53 6e 74 12 99 4f b9 01 4a 06 a8 4c b6 c9 9b 0b b2 5e 90 27 97 a0 7d 57 c5 c9 66 60 9b f3 7e 1e c1 29 c7 3c 5b b4 ab af 1a 1d 7e 3b 67 84 ab 36 bc 56 c1 24 ea 16 93 29 93 b1 ec 6a 2c b2 55 b7 49 09 c9 04 cd 4b 15 e4 76 24 39 f5 88 8a b6 6c 06 53 6f e0 21 3b 95 90 df e3 c6 16 98 82 33 82 07 81 d9 f8 05 f1 57 c4 15 ac 95 40 e2 d7 36 ec 72 b5 4a 61 4a 52 10 b1 82 9b da 62 7a 5b 52 bd 72 42 ef 43 22 93 8a b0 e5 fc 5e a4 ca 35 80 44 ee 1d bf 3a c9 30 7f bc 92 3b ca 85 4a d2 b0 cb 8f 23 3d fe 78 5a 01 36 55 bc a8 82 b7 87 42 bf d3 0a 0e 29 b5 7e a7 65 d2 25 d7 2c 16 24 2c 93 47 88 59 6a Data Ascii: {Ywcp[[]]p(bxMm:Mr1"V&\|1?5%SntOJL^'}Wf`~)<[~;g6V$)j,UIKv$9lSo!;3W@6rJaJRbz[RrBC"^5D:0;J#=xZ6UB)~e%,$,GYj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	104.16.225.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:08 UTC	520	OUT	GET /js HTTP/1.1 Host: static.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:08 UTC	439	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:08 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding access-control-allow-origin: * Cache-Control: max-age=604800 x-proxy-cache: HIT Last-Modified: Sat, 16 Mar 2024 19:19:45 GMT CF-Cache-Status: HIT Age: 161962 Server: cloudflare CF-RAY: 86668ae8e9240f83-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:08 UTC	930	IN	Data Raw: 33 61 66 33 0d 0a 76 61 72 20 63 6c 69 63 6b 79 5f 6f 62 6a 3d 63 6c 69 63 6b 79 5f 6f 62 6a 7c 7c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 73 28 29 7b 76 61 72 20 5f 73 65 6c 66 3d 74 68 69 73 2c 73 69 74 65 5f 69 64 73 3d 5b 5d 2c 70 61 67 65 76 69 65 77 73 5f 66 69 72 65 64 3d 5b 5d 2c 6d 6f 6e 69 74 6f 72 73 3d 30 2c 73 65 74 75 70 3d 30 2c 6f 73 73 61 73 73 65 74 73 3d 30 2c 6f 73 73 64 61 74 61 3d 30 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 27 2f 2f 69 6e 2e 67 65 74 63 6c 69 63 6b 79 2e 63 6f 6d 27 3b 74 68 69 73 2e 73 69 74 65 6b 65 79 73 3d 5b 5d 3b 74 68 69 73 2e 73 69 74 65 5f 69 64 5f 65 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 73 69 74 65 5f 69 64 29 7b 66 Data Ascii: 3af3var clicky_obj=clicky_obj\|\|(function(){var instance=null;function _ins(){var _self=this,site_ids=[],pageviews_fired=[],monitors=0,setup=0,ossassets=0,ossdata=0;this.domain='//in.getclicky.com';this.sitekeys=[];this.site_id_exists=function(site_id){f
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 61 73 68 2e 6d 61 74 63 68 28 2f 5e 23 5f 68 65 61 74 6d 61 70 2f 29 29 5f 73 65 6c 66 2e 68 65 61 74 6d 61 70 28 29 3b 69 66 28 21 5f 73 65 6c 66 2e 67 65 74 5f 63 6f 6f 6b 69 65 28 27 5f 66 69 72 73 74 5f 70 61 67 65 76 69 65 77 27 29 29 7b 5f 73 65 6c 66 2e 73 65 74 5f 72 65 66 65 72 72 65 72 28 29 3b 7d 5f 73 65 6c 66 2e 73 74 61 72 74 5f 6d 6f 6e 69 74 6f 72 73 28 29 3b 69 66 28 21 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 70 61 67 65 76 69 65 77 5f 64 69 73 61 62 6c 65 29 5f 73 65 6c 66 2e 70 61 67 65 76 69 65 77 28 31 29 3b 7d 3b 74 68 69 73 2e 63 75 73 74 6f 6d 5f 64 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 61 74 61 3d 7b 7d 2c 6b 65 79 73 3d 5b 27 75 73 65 72 6e 61 6d 65 27 2c 27 6e 61 6d 65 27 2c 27 65 6d 61 69 6c 27 5d 2c 6c Data Ascii: ash.match(/^#_heatmap/))_self.heatmap();if(!_self.get_cookie('_first_pageview')){_self.set_referrer();}_self.start_monitors();if(!clicky_custom.pageview_disable)_self.pageview(1);};this.custom_data=function(){var data={},keys=['username','name','email'],l
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6f 6e 6c 79 5f 6f 6e 63 65 29 7b 76 61 72 20 68 72 65 66 3d 5f 73 65 6c 66 2e 67 65 74 5f 68 72 65 66 28 29 3b 69 66 28 5f 73 65 6c 66 2e 66 61 63 65 62 6f 6f 6b 5f 69 73 5f 6c 61 6d 65 28 68 72 65 66 29 29 72 65 74 75 72 6e 3b 5f 73 65 6c 66 2e 62 65 61 63 6f 6e 28 27 70 61 67 65 76 69 65 77 27 2c 27 26 68 72 65 66 3d 27 2b 5f 73 65 6c 66 2e 65 6e 63 28 68 72 65 66 29 2b 27 26 74 69 74 6c 65 3d 27 2b 5f 73 65 6c 66 2e 65 6e 63 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 74 69 74 6c 65 7c 7c 77 69 6e 64 6f 77 2e 63 6c 69 63 6b 79 5f 70 61 67 65 5f 74 69 74 6c 65 7c 7c 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 74 72 61 63 6b 5f 69 66 72 61 6d 65 7c 7c 21 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 3f 64 6f 63 75 6d Data Ascii: function(only_once){var href=_self.get_href();if(_self.facebook_is_lame(href))return;_self.beacon('pageview','&href='+_self.enc(href)+'&title='+_self.enc(clicky_custom.title\|\|window.clicky_page_title\|\|(clicky_custom.track_iframe\|\|!top.document.title?docum
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 54 6f 70 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 3b 76 61 72 20 77 3d 5f 73 65 6c 66 2e 64 6f 63 5f 77 68 28 29 2c 68 72 65 66 3d 5f 73 65 6c 66 2e 67 65 74 5f 68 72 65 66 28 29 3b 69 66 28 21 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 68 65 61 74 6d 61 70 5f 64 69 73 61 62 6c 65 29 5f 73 65 6c 66 2e 62 65 61 63 6f 6e 28 27 68 65 61 74 6d 61 70 27 2c 27 26 68 65 61 74 6d 61 70 5b 5d 3d 27 2b 5f 73 65 6c 66 2e 65 6e 63 28 68 72 65 66 29 2b 27 7c 27 2b 78 2b 27 7c 27 2b 79 2b 27 7c 27 2b 77 2e 77 29 3b 7d 3b 74 68 69 73 2e 64 6f 63 5f 77 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 62 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 64 65 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 7b 77 3a 77 69 6e 64 Data Ascii: Top;}else return;var w=_self.doc_wh(),href=_self.get_href();if(!clicky_custom.heatmap_disable)_self.beacon('heatmap','&heatmap[]='+_self.enc(href)+'\|'+x+'\|'+y+'\|'+w.w);};this.doc_wh=function(){var db=document.body,de=document.documentElement;return{w:wind
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 2e 6a 51 75 65 72 79 26 26 77 69 6e 64 6f 77 2e 5f 4f 53 53 29 7b 69 66 28 5f 73 65 6c 66 2e 6a 71 6e 63 29 7b 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 3b 5f 73 65 6c 66 2e 6a 71 6e 63 3d 30 3b 7d 69 66 28 21 6f 73 73 64 61 74 61 7c 7c 72 65 66 72 65 73 68 29 7b 6f 73 73 64 61 74 61 3d 31 3b 5f 73 65 6c 66 2e 69 6e 6a 65 63 74 28 27 2f 2f 63 6c 69 63 6b 79 2e 63 6f 6d 2f 61 6a 61 78 2f 6f 6e 73 69 74 65 73 74 61 74 73 2f 3f 73 69 74 65 5f 69 64 3d 27 2b 73 69 74 65 5f 69 64 73 5b 30 5d 2b 5f 73 65 6c 66 2e 73 69 74 65 6b 65 79 28 73 69 74 65 5f 69 64 73 5b 30 5d 29 2b 27 26 68 72 65 66 3d 27 2b 5f 73 65 6c 66 2e 67 65 74 5f 68 72 65 66 28 31 29 2b 27 26 64 6f 6d 61 69 6e 3d 27 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 28 72 Data Ascii: .jQuery&&window._OSS){if(_self.jqnc){jQuery.noConflict();_self.jqnc=0;}if(!ossdata\|\|refresh){ossdata=1;_self.inject('//clicky.com/ajax/onsitestats/?site_id='+site_ids[0]+_self.sitekey(site_ids[0])+'&href='+_self.get_href(1)+'&domain='+location.hostname+(r
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 63 6b 79 5f 63 75 73 74 6f 6d 2e 68 65 61 74 6d 61 70 5f 6f 62 6a 65 63 74 73 29 5f 73 65 6c 66 2e 68 65 61 74 6d 61 70 5f 6f 76 65 72 72 69 64 65 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 68 65 61 74 6d 61 70 5f 6f 62 6a 65 63 74 73 5b 68 6d 6f 5d 29 3b 7d 65 6c 73 65 7b 5f 73 65 6c 66 2e 68 65 61 74 6d 61 70 5f 6f 76 65 72 72 69 64 65 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 68 65 61 74 6d 61 70 5f 6f 62 6a 65 63 74 73 29 3b 7d 7d 7d 65 6c 73 65 20 73 65 74 54 69 6d 65 6f 75 74 28 5f 73 65 6c 66 2e 68 6d 5f 6d 6f 6e 69 74 6f 72 2c 31 30 30 30 29 3b 7d 3b 74 68 69 73 2e 68 74 6d 6c 5f 6d 65 64 69 61 5f 6d 6f 6e 69 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 5f 68 74 6d 6c 76 69 64 29 5f 73 65 6c 66 2e 69 6e 6a 65 Data Ascii: cky_custom.heatmap_objects)_self.heatmap_override(clicky_custom.heatmap_objects[hmo]);}else{_self.heatmap_override(clicky_custom.heatmap_objects);}}}else setTimeout(_self.hm_monitor,1000);};this.html_media_monitor=function(){if(!window._htmlvid)_self.inje
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 73 65 6c 66 2e 65 6e 63 28 69 29 2b 27 5d 3d 27 2b 5f 73 65 6c 66 2e 65 6e 63 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 67 6f 61 6c 5b 69 5d 29 3b 7d 7d 65 6c 73 65 7b 67 6f 61 6c 3d 27 26 67 6f 61 6c 3d 27 2b 5f 73 65 6c 66 2e 65 6e 63 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 67 6f 61 6c 29 3b 7d 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 67 6f 61 6c 3d 27 27 3b 7d 69 66 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 73 70 6c 69 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 5b 27 73 70 6c 69 74 27 5d 29 7b 69 66 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 5b 27 73 70 6c 69 74 27 5d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 26 26 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 5b 27 73 70 6c 69 74 27 5d 2e 68 61 73 4f Data Ascii: self.enc(i)+']='+_self.enc(clicky_custom.goal[i]);}}else{goal='&goal='+_self.enc(clicky_custom.goal);}clicky_custom.goal='';}if(clicky_custom.split){for(var i in clicky_custom['split']){if(clicky_custom['split'].hasOwnProperty&&clicky_custom['split'].hasO
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 27 27 29 2b 28 5f 73 65 6c 66 2e 68 65 5f 6d 6f 64 65 6c 3f 27 26 68 65 6d 3d 27 2b 5f 73 65 6c 66 2e 68 65 5f 6d 6f 64 65 6c 3a 27 27 29 2b 27 26 63 6b 3d 27 2b 28 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 26 26 21 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 3f 31 3a 30 29 2b 28 6a 73 75 69 64 3f 27 26 6a 73 75 69 64 3d 27 2b 6a 73 75 69 64 3a 27 27 29 2b 28 68 6d 3f 27 26 68 6d 3d 27 2b 68 6d 3a 27 27 29 2b 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 76 69 73 69 74 6f 72 5f 63 6f 6e 73 65 6e 74 3f 27 26 63 6f 6e 73 65 6e 74 3d 31 27 3a 27 27 29 2b 27 27 2b 27 26 78 3d 27 2b 5f 73 65 6c 66 2e 72 6e 64 28 29 2c 28 74 79 70 65 3d 3d 27 70 61 67 65 76 69 65 77 27 3f 27 6a 73 27 3a 27 62 Data Ascii: '')+(_self.he_model?'&hem='+_self.he_model:'')+'&ck='+(navigator.cookieEnabled&&!clicky_custom.cookies_disable?1:0)+(jsuid?'&jsuid='+jsuid:'')+(hm?'&hm='+hm:'')+(clicky_custom.visitor_consent?'&consent=1':'')+''+'&x='+_self.rnd(),(type=='pageview'?'js':'b
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 7b 5f 73 65 6c 66 2e 62 65 61 63 6f 6e 28 27 70 69 6e 67 27 29 3b 7d 3b 74 68 69 73 2e 67 65 74 5f 63 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 69 66 28 63 6c 69 63 6b 79 5f 63 75 73 74 6f 6d 2e 73 74 69 63 6b 79 5f 64 61 74 61 5f 64 69 73 61 62 6c 65 26 26 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5e 5f 28 63 75 73 74 6f 6d 7c 75 74 6d 7c 72 65 66 65 72 72 65 72 29 2f 29 29 72 65 74 75 72 6e 27 27 3b 76 61 72 20 63 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 6c 3d 63 61 2e 6c 65 6e 67 74 68 3b 69 3c 6c 3b 69 2b 2b 29 7b 69 66 28 63 61 5b 69 5d 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 62 22 2b 6e 61 6d 65 2b 22 3d 22 29 29 29 72 65 74 75 72 Data Ascii: {_self.beacon('ping');};this.get_cookie=function(name){if(clicky_custom.sticky_data_disable&&name.match(/^_(custom\|utm\|referrer)/))return'';var ca=document.cookie.split(';');for(var i=0,l=ca.length;i<l;i++){if(ca[i].match(new RegExp("\\b"+name+"=")))retur
2024-03-18 16:19:08 UTC	1369	IN	Data Raw: 73 76 7c 64 6d 67 7c 64 6f 63 28 78 7c 6d 7c 62 29 3f 7c 65 70 75 62 7c 65 78 65 7c 66 6c 76 7c 67 69 66 7c 67 7a 7c 6a 70 65 3f 67 7c 6a 73 7c 6d 34 61 7c 6d 70 28 33 7c 34 7c 65 3f 67 29 7c 6d 6f 62 69 7c 6d 6f 76 7c 6d 73 69 7c 6f 64 73 7c 70 64 66 7c 70 68 70 73 7c 70 6e 67 7c 70 70 74 28 78 7c 6d 7c 62 29 3f 7c 72 61 72 7c 72 74 66 7c 73 65 61 7c 73 69 74 7c 73 76 67 7a 3f 7c 74 61 72 7c 74 6f 72 72 65 6e 74 7c 74 78 74 7c 76 63 66 7c 77 65 62 28 6d 7c 70 29 7c 77 6d 61 7c 77 6d 76 7c 78 6c 73 28 78 7c 6d 7c 62 29 3f 7c 78 6d 6c 7c 7a 69 70 29 24 22 2c 22 69 22 29 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 61 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 61 2e 6c 65 6e 67 74 Data Ascii: sv\|dmg\|doc(x\|m\|b)?\|epub\|exe\|flv\|gif\|gz\|jpe?g\|js\|m4a\|mp(3\|4\|e?g)\|mobi\|mov\|msi\|ods\|pdf\|phps\|png\|ppt(x\|m\|b)?\|rar\|rtf\|sea\|sit\|svgz?\|tar\|torrent\|txt\|vcf\|web(m\|p)\|wma\|wmv\|xls(x\|m\|b)?\|xml\|zip)$","i");var a=document.getElementsByTagName("a");for(var i=0;i<a.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	54.231.230.225	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:08 UTC	602	OUT	GET /img/logo-sn-trans1.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:08 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: 2YlQP5vRqIt97uC9YkjpbSOWq5hMX4iDJEHoAAHtxQZLr/K5UQUfQo3PLyXUfrZm8gHmxwTJu00= x-amz-request-id: 6QF04XDG5VP5ZP0B Date: Mon, 18 Mar 2024 16:19:09 GMT Last-Modified: Fri, 20 Oct 2023 14:07:42 GMT ETag: "86a966453770fcadb464b7eb4368ca0f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 10819 Connection: close
2024-03-18 16:19:08 UTC	10819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9e 00 00 00 83 08 06 00 00 00 24 a1 1b ff 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 29 d8 49 44 41 54 78 01 ed 9d cd 6f 1b 59 ba de df 73 8a 92 dd 37 37 b8 9c b1 1d 24 c0 4c 9b f2 6c b2 b3 b4 0b 1a 23 9b da 65 d7 f2 2e 77 65 0a ed 6e 64 27 7b 99 95 e5 65 56 b6 57 41 dc 6e 48 5e 65 69 f9 2f 30 db ea 09 ee ce f2 32 8b db a2 dc 03 04 88 e5 31 07 18 8c db 12 eb 9c bc ef a9 a2 4c 51 ac 4f 56 91 45 e9 f9 01 b2 25 56 b1 58 ac 8f 53 cf 79 3f 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$pHYssRGBgAMAa)IDATxoYs77$Ll#e.wend'{eVWAnH^ei/021LQOVE%VXSy?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	54.231.230.225	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:08 UTC	605	OUT	GET /img/images/arrow-down.svg HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:08 UTC	379	IN	HTTP/1.1 200 OK x-amz-id-2: UC/RBUSwB1Sbokiy0MQtalWYy43u67CIHcPu2y13JKP6onNY4GrOYW90cj+cPZOCeX4NZQyOtkI= x-amz-request-id: 6QFDFZ3N874S7D32 Date: Mon, 18 Mar 2024 16:19:09 GMT Last-Modified: Sat, 12 Nov 2022 17:00:26 GMT ETag: "2f7c63ffe11a294662bd0904b2621006" Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 653 Connection: close
2024-03-18 16:19:08 UTC	653	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 33 38 36 5f 31 34 39 31 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 35 38 30 32 37 20 39 2e 36 32 34 39 4c 30 2e 37 37 33 38 33 33 20 34 2e 37 38 34 38 32 43 30 2e 35 34 32 30 32 33 20 34 2e 35 35 31 33 39 20 30 2e 35 34 32 30 32 33 20 34 2e 31 37 32 39 34 20 30 2e 37 37 33 38 33 33 20 33 2e 39 33 39 35 33 4c 31 2e 33 33 34 34 33 20 33 2e 33 37 35 30 32 43 31 2e 35 36 35 38 34 20 33 2e 31 34 31 Data Ascii: <svg width="12" height="13" viewBox="0 0 12 13" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_386_1491)"><path d="M5.58027 9.6249L0.773833 4.78482C0.542023 4.55139 0.542023 4.17294 0.773833 3.93953L1.33443 3.37502C1.56584 3.141

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	54.231.230.225	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:08 UTC	609	OUT	GET /img/logo-sn-sq-bright-40.webp HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:08 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: LR5vltyN6Bsb7I3IQmnJHKrg7/vARFXTZsmtxpb73kAqjKNByNlMRwVJbMo7s6EfsdfHtzMyN9c= x-amz-request-id: 6QF2S23DTDT93Z5T Date: Mon, 18 Mar 2024 16:19:09 GMT Last-Modified: Thu, 30 Mar 2023 14:45:39 GMT ETag: "d8e871924c91281d2ce476d8b3df68d1" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/webp Server: AmazonS3 Content-Length: 6352 Connection: close
2024-03-18 16:19:08 UTC	6352	IN	Data Raw: 52 49 46 46 c8 18 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 b5 00 00 ac 00 00 49 43 43 50 c0 0f 00 00 00 00 0f c0 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e7 00 02 00 02 00 0e 00 11 00 02 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 04 9c 63 70 72 74 00 00 06 50 00 00 00 23 77 74 70 74 00 00 06 74 00 00 00 14 72 58 59 5a 00 00 06 88 00 00 00 14 67 58 59 5a 00 00 06 9c 00 00 00 14 62 58 59 5a 00 00 06 b0 00 00 00 14 72 Data Ascii: RIFFWEBPVP8X8ICCPapplmntrRGB XYZ acspAPPLAPPL-appldescPbdscmcprtP#wtpttrXYZgXYZbXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	677	OUT	GET /in.php?site_id=100724983&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=alamld HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:09 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668aef7ae641ad-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:09 UTC	168	IN	Data Raw: 61 32 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 79 65 73 27 3b 0a 7d 0a 0d 0a Data Ascii: a2if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='yes';}
2024-03-18 16:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	677	OUT	GET /in.php?site_id=101089440&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=966dlr HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:09 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668aef6e7342ef-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:09 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	1182	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778748156&cv=11&fst=1710778748156&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:34:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:09 UTC	410	IN	Data Raw: 38 65 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8e1(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:09 UTC	1252	IN	Data Raw: 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 Data Ascii: 1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("S
2024-03-18 16:19:09 UTC	618	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 41 33 4e 7a 67 33 4e 44 67 78 4e 54 59 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 31 30 34 37 31 37 34 31 36 33 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 30 37 37 38 37 34 38 31 35 36 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 Data Ascii: ).call(this);;s.ss_(window,'OjE3MTA3Nzg3NDgxNTY',['https://www.google.com/pagead/1p-user-list/1047174163/?random\x3d1710778748156\x26cv\x3d11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d1
2024-03-18 16:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	1306	OUT	GET /td/rul/1047174163?random=1710778748156&cv=11&fst=1710778748156&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 18-Mar-2024 16:34:09 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:09 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	54.231.202.161	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	375	OUT	GET /img/logo-sn-sq-bright-40.webp HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: coaMAd+sO6qgf7kC7vIQFxwQJ3jWll1JtQLN1vkpq7GGX1VzZI33qGWO8CquccScAwY5Cp/6g+I= x-amz-request-id: MK5ZDRC7PRBM1QY7 Date: Mon, 18 Mar 2024 16:19:10 GMT Last-Modified: Thu, 30 Mar 2023 14:45:39 GMT ETag: "d8e871924c91281d2ce476d8b3df68d1" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/webp Server: AmazonS3 Content-Length: 6352 Connection: close
2024-03-18 16:19:09 UTC	6352	IN	Data Raw: 52 49 46 46 c8 18 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 38 00 00 00 b5 00 00 ac 00 00 49 43 43 50 c0 0f 00 00 00 00 0f c0 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e7 00 02 00 02 00 0e 00 11 00 02 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 04 9c 63 70 72 74 00 00 06 50 00 00 00 23 77 74 70 74 00 00 06 74 00 00 00 14 72 58 59 5a 00 00 06 88 00 00 00 14 67 58 59 5a 00 00 06 9c 00 00 00 14 62 58 59 5a 00 00 06 b0 00 00 00 14 72 Data Ascii: RIFFWEBPVP8X8ICCPapplmntrRGB XYZ acspAPPLAPPL-appldescPbdscmcprtP#wtpttrXYZgXYZbXYZr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	54.231.202.161	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	371	OUT	GET /img/images/arrow-down.svg HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	379	IN	HTTP/1.1 200 OK x-amz-id-2: p86SsGV/U9tkbXidisc8FNFDRboUm4dK/PMt4yyDKPwgWohp7RzuLWNaIHnC38Lzbfc1xGPOTLg= x-amz-request-id: MK5W8T7TZBMNR1C7 Date: Mon, 18 Mar 2024 16:19:10 GMT Last-Modified: Sat, 12 Nov 2022 17:00:26 GMT ETag: "2f7c63ffe11a294662bd0904b2621006" Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 653 Connection: close
2024-03-18 16:19:09 UTC	653	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 33 38 36 5f 31 34 39 31 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 35 38 30 32 37 20 39 2e 36 32 34 39 4c 30 2e 37 37 33 38 33 33 20 34 2e 37 38 34 38 32 43 30 2e 35 34 32 30 32 33 20 34 2e 35 35 31 33 39 20 30 2e 35 34 32 30 32 33 20 34 2e 31 37 32 39 34 20 30 2e 37 37 33 38 33 33 20 33 2e 39 33 39 35 33 4c 31 2e 33 33 34 34 33 20 33 2e 33 37 35 30 32 43 31 2e 35 36 35 38 34 20 33 2e 31 34 31 Data Ascii: <svg width="12" height="13" viewBox="0 0 12 13" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_386_1491)"><path d="M5.58027 9.6249L0.773833 4.78482C0.542023 4.55139 0.542023 4.17294 0.773833 3.93953L1.33443 3.37502C1.56584 3.141

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1044 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	1044	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 32 61 61 30 61 37 37 35 33 33 39 39 36 38 35 36 62 39 39 65 30 65 30 36 63 34 61 38 30 37 38 31 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 34 38 32 32 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=2aa0a77533996856b99e0e06c4a80781&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778748221%2C%22event_id%22%3A1%2C%22session_id%22%3A1710
2024-03-18 16:19:10 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:09 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f8697d-63c457c77e1b4dfe114458ad Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:10 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	54.231.202.161	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	368	OUT	GET /img/logo-sn-trans1.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:09 UTC	415	IN	HTTP/1.1 200 OK x-amz-id-2: zgmEqFH+2G/8Plyy6OGjWeQwgGL6XnbA/v1n2ls1o4MF1ptY4KYh4KpF6n4EY3Y8JLCLsCUnBsk= x-amz-request-id: MK5Y31KTWWF00R8F Date: Mon, 18 Mar 2024 16:19:10 GMT Last-Modified: Fri, 20 Oct 2023 14:07:42 GMT ETag: "86a966453770fcadb464b7eb4368ca0f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 10819 Connection: close
2024-03-18 16:19:09 UTC	1542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9e 00 00 00 83 08 06 00 00 00 24 a1 1b ff 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 29 d8 49 44 41 54 78 01 ed 9d cd 6f 1b 59 ba de df 73 8a 92 dd 37 37 b8 9c b1 1d 24 c0 4c 9b f2 6c b2 b3 b4 0b 1a 23 9b da 65 d7 f2 2e 77 65 0a ed 6e 64 27 7b 99 95 e5 65 56 b6 57 41 dc 6e 48 5e 65 69 f9 2f 30 db ea 09 ee ce f2 32 8b db a2 dc 03 04 88 e5 31 07 18 8c db 12 eb 9c bc ef a9 a2 4c 51 ac 4f 56 91 45 e9 f9 01 b2 25 56 b1 58 ac 8f 53 cf 79 3f 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$pHYssRGBgAMAa)IDATxoYs77$Ll#e.wend'{eVWAnH^ei/021LQOVE%VXSy?
2024-03-18 16:19:09 UTC	9277	IN	Data Raw: 37 0f e6 17 be 9b d8 f1 fd f8 f6 49 4b 93 fe da 5d 43 64 9e cd 7f f9 dd d6 a8 f5 e2 5a 66 f2 7b db 94 15 4b 6f fc 79 ef 51 de e3 29 c7 ed 93 ee b5 b4 52 d7 ad a5 66 d4 be 0d d0 55 56 75 ac b2 1d 3e d6 3f 5a 43 bb 5f 2c 7c db 26 50 49 20 3c 2b ca e5 c6 1f f9 66 53 2f a9 44 ac a2 ad f7 3f ef ac 1d 7f e6 c2 f2 07 ca d3 be 73 1a c2 53 3e d6 da 17 17 af 7e 5b aa 9b 7f e0 c1 2c d9 fb 05 24 51 29 16 a2 f4 a3 32 7a 3b 8b 68 18 39 11 51 6a e3 e0 e7 57 b9 cb 61 a5 85 2d f0 ab c3 16 78 7e 88 76 7c eb 2d 8d 12 83 e1 24 e6 35 9d 3c 5e fc 60 f0 57 de 49 d7 ac 01 02 41 6b 56 59 a0 de a6 98 e3 1b f5 79 2c c6 1f 86 e7 e6 18 de d7 ad 77 03 d7 75 59 38 71 ad fc 97 6a c8 e2 6d b5 6a bd ff d7 57 99 2b 55 b8 89 8d f2 a5 31 43 9a 49 4d f0 59 7c 5c d8 53 d1 66 11 fa 38 ab 60 8c Data Ascii: 7IK]CdZf{KoyQ)RfUVu>?ZC_,\|&PI <+fS/D?sS>~[,$Q)2z;h9QjWa-x~v\|-$5<^`WIAkVYy,wuY8qjmjW+U1CIMY\|\Sf8`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-18 16:19:09 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=183989 Date: Mon, 18 Mar 2024 16:19:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49761	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-18 16:19:10 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=184000 Date: Mon, 18 Mar 2024 16:19:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-18 16:19:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:10 UTC	1262	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778748156&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQcU_CcHJw9oJTkap3YFA6gcfmhHReQ&random=889736705&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:10 UTC	1197	OUT	GET /snuts_favicon_new.ico HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc0ODIyMywiZXZlbnRJZCI6MiwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjJ9
2024-03-18 16:19:11 UTC	812	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778751&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=jR7KVvq1XWVHh0o07LXfvwETp4bccpj0LjDJbXY0Zzc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778751&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=jR7KVvq1XWVHh0o07LXfvwETp4bccpj0LjDJbXY0Zzc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:11 GMT Last-Modified: Wed, 21 Feb 2024 12:38:57 GMT Content-Type: image/vnd.microsoft.icon Cache-Control: public, max-age=86400, no-transform Content-Length: 710 Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:11 UTC	374	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 68 49 44 41 54 78 da c4 57 3b 4b 03 41 10 de 3b 8d 6f 92 48 d4 20 28 24 85 85 20 62 2a c5 26 97 c2 26 8d 16 82 a0 45 12 05 db f8 07 04 83 3f 40 d3 0b c6 c2 da 58 5b a8 85 20 82 a8 10 04 05 25 8d 08 62 e0 04 95 f8 00 9d 89 13 3c 43 f6 6e ef b2 ea c0 b0 7b b0 9b ef db 6f 1e bb 61 cc 86 c5 47 7c 1a 78 9c 49 34 c5 06 f8 04 0c 5b f4 19 c9 1c 16 f6 64 10 a8 b7 b1 36 49 63 de 08 8e aa c0 10 03 0f 80 eb e4 38 df 06 cf c0 5a 5d 96 02 bb 30 20 58 1e fc 14 7c 42 60 1b ae 4b 01 89 2c 6f 81 2a 08 3e 64 f8 0c 08 82 a3 e1 be 2d d8 bf ee 58 01 d8 bc 02 c3 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<hIDATxW;KA;oH ($ b&&E?@X[ %b<Cn{oaG\|xI4[d6Ic8Z]0 X\|B`K,o>d-X
2024-03-18 16:19:11 UTC	336	IN	Data Raw: cd 9e b6 77 e6 aa ff f0 6e 2e 0e 0c cd 2c e7 c4 cb 90 67 83 fd 0a eb e9 56 98 cf fb 35 2f c7 db cc 3a 3c af ec b6 d0 a8 51 67 e4 12 d8 af 16 02 04 c2 6e 8e a0 28 2f 82 da 35 54 01 08 84 61 ba ca 25 00 59 9a 81 3c 08 1b 49 60 4c e7 a7 55 a1 53 9a 99 1b 08 d0 3d 62 dd 8a 31 19 e7 a6 d4 95 4e 1f d3 f0 d4 32 ec fe a1 81 1d 9c 95 d2 ab 1d f2 40 37 6d 44 d8 af 43 03 4a 5a 16 78 39 07 0c 97 93 75 2b 6e 1b bb cb 52 fb fc 75 33 bb 8e 33 ff 4d 20 fd af 04 20 0c 79 59 2a bc bd 2b 8e 14 40 4b c9 20 f0 f0 e4 32 3e d1 c4 09 90 0a ab 35 13 78 2c b5 9b bd ca 12 14 7d 13 a6 6a ad 88 82 5e 52 60 c3 d1 a3 14 54 d0 79 37 99 68 fc a1 11 e9 bc eb 58 e8 55 4c 7d c1 51 42 5e df b4 20 89 74 35 f9 85 09 10 89 84 5d 12 cf c5 3a 7c 0b e8 66 79 a4 da f9 41 22 91 10 cd 89 a3 73 0f 9e Data Ascii: wn.,gV5/:<Qgn(/5Ta%Y<I`LUS=b1N2@7mDCJZx9u+nRu33M yY*+@K 2>5x,}j^R`Ty7hXUL}QB^ t5]:\|fyA"s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:11 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1041 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:11 UTC	1041	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 32 35 36 31 65 65 35 37 35 64 36 31 66 34 64 31 35 36 61 39 62 35 63 30 63 35 35 39 37 33 36 32 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 34 38 32 32 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=2561ee575d61f4d156a9b5c0c5597362&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778748223%2C%22event_id%22%3A2%2C%22session_id%22%3A1710
2024-03-18 16:19:11 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:11 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f8697f-5eaf32fd69caba913d6dad83 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:11 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49768	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:12 UTC	1028	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778748156&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqQcU_CcHJw9oJTkap3YFA6gcfmhHReQ&random=889736705&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	54.161.241.46	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:12 UTC	960	OUT	GET /snuts_favicon_new.ico HTTP/1.1 Host: surveynuts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc0ODIyMywiZXZlbnRJZCI6MiwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjJ9
2024-03-18 16:19:12 UTC	816	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778752&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=%2FCAssJLSwRoMg5OXC5BpLbJhdI07kdi4u9xKNZqYUh4%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778752&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=%2FCAssJLSwRoMg5OXC5BpLbJhdI07kdi4u9xKNZqYUh4%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:12 GMT Last-Modified: Wed, 21 Feb 2024 12:38:57 GMT Content-Type: image/vnd.microsoft.icon Cache-Control: public, max-age=86400, no-transform Content-Length: 710 Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:12 UTC	370	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 68 49 44 41 54 78 da c4 57 3b 4b 03 41 10 de 3b 8d 6f 92 48 d4 20 28 24 85 85 20 62 2a c5 26 97 c2 26 8d 16 82 a0 45 12 05 db f8 07 04 83 3f 40 d3 0b c6 c2 da 58 5b a8 85 20 82 a8 10 04 05 25 8d 08 62 e0 04 95 f8 00 9d 89 13 3c 43 f6 6e ef b2 ea c0 b0 7b b0 9b ef db 6f 1e bb 61 cc 86 c5 47 7c 1a 78 9c 49 34 c5 06 f8 04 0c 5b f4 19 c9 1c 16 f6 64 10 a8 b7 b1 36 49 63 de 08 8e aa c0 10 03 0f 80 eb e4 38 df 06 cf c0 5a 5d 96 02 bb 30 20 58 1e fc 14 7c 42 60 1b ae 4b 01 89 2c 6f 81 2a 08 3e 64 f8 0c 08 82 a3 e1 be 2d d8 bf ee 58 01 d8 bc 02 c3 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<hIDATxW;KA;oH ($ b&&E?@X[ %b<Cn{oaG\|xI4[d6Ic8Z]0 X\|B`K,o>d-X
2024-03-18 16:19:12 UTC	340	IN	Data Raw: d9 70 88 5f cd 9e b6 77 e6 aa ff f0 6e 2e 0e 0c cd 2c e7 c4 cb 90 67 83 fd 0a eb e9 56 98 cf fb 35 2f c7 db cc 3a 3c af ec b6 d0 a8 51 67 e4 12 d8 af 16 02 04 c2 6e 8e a0 28 2f 82 da 35 54 01 08 84 61 ba ca 25 00 59 9a 81 3c 08 1b 49 60 4c e7 a7 55 a1 53 9a 99 1b 08 d0 3d 62 dd 8a 31 19 e7 a6 d4 95 4e 1f d3 f0 d4 32 ec fe a1 81 1d 9c 95 d2 ab 1d f2 40 37 6d 44 d8 af 43 03 4a 5a 16 78 39 07 0c 97 93 75 2b 6e 1b bb cb 52 fb fc 75 33 bb 8e 33 ff 4d 20 fd af 04 20 0c 79 59 2a bc bd 2b 8e 14 40 4b c9 20 f0 f0 e4 32 3e d1 c4 09 90 0a ab 35 13 78 2c b5 9b bd ca 12 14 7d 13 a6 6a ad 88 82 5e 52 60 c3 d1 a3 14 54 d0 79 37 99 68 fc a1 11 e9 bc eb 58 e8 55 4c 7d c1 51 42 5e df b4 20 89 74 35 f9 85 09 10 89 84 5d 12 cf c5 3a 7c 0b e8 66 79 a4 da f9 41 22 91 10 cd 89 Data Ascii: p_wn.,gV5/:<Qgn(/5Ta%Y<I`LUS=b1N2@7mDCJZx9u+nRu33M yY*+@K 2>5x,}j^R`Ty7hXUL}QB^ t5]:\|fyA"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49767	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:12 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:13 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:12 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f86980-24d1364a092f347b3810c60e Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:13 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49773	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:13 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:13 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:13 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f86981-1dfe277f360a49ba67591107 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:13 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49775	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:21 UTC	1246	OUT	GET /en/login HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc0ODIyMywiZXZlbnRJZCI6MiwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjJ9
2024-03-18 16:19:21 UTC	912	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778761&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=mOqZcOplvvkQyFAUU5aa8Mr61Se4g9dkydaImJZ5UV0%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778761&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=mOqZcOplvvkQyFAUU5aa8Mr61Se4g9dkydaImJZ5UV0%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:21 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"3ef331a92745eb03b898c74d7dbf28b7" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 8c740aa7-c5bb-44eb-b820-e0e211ed795c X-Runtime: 0.021901 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:21 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 74 6f 20 53 75 72 76 65 79 4e 75 74 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 5f 74 65 78 74 20 3d 20 22 Data Ascii: <!DOCTYPE html><html><head><title>Login to SurveyNuts</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale = "en"; var locale_text = "
2024-03-18 16:19:21 UTC	3558	IN	Data Raw: 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 Data Ascii: ","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater than or equal to %{count}","
2024-03-18 16:19:21 UTC	4744	IN	Data Raw: 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 65 69 6e 67 20 62 75 69 6c 74 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 20 4d 6f 73 Data Ascii: subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview being built in real-time. Mos
2024-03-18 16:19:21 UTC	2358	IN	Data Raw: 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 79 6f 75 72 20 72 65 73 75 6c 74 73 20 62 65 66 6f 72 65 20 64 69 67 67 Data Ascii: n real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview of your results before digg
2024-03-18 16:19:21 UTC	4344	IN	Data Raw: 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 65 73 70 6f 6e 64 20 74 6f 20 6d 6f 73 74 20 72 65 71 75 65 73 74 73 20 62 79 20 65 Data Ascii: feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We respond to most requests by e
2024-03-18 16:19:21 UTC	8302	IN	Data Raw: 6d 65 6e 74 2e 2e 2e 29 20 74 6f 20 61 6e 73 77 65 72 20 74 68 69 73 20 71 75 65 73 74 69 6f 6e 2e 20 46 69 6c 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 75 6e 64 65 72 20 31 30 4d 42 2e 22 2c 22 77 61 69 74 22 3a 22 57 61 69 74 2e 2e 2e 22 2c 22 62 75 74 74 6f 6e 31 22 3a 22 43 72 65 61 74 65 20 53 75 72 76 65 79 22 2c 22 70 72 65 76 69 65 77 22 3a 22 50 72 65 76 69 65 77 22 2c 22 70 72 6f 5f 73 69 67 6e 75 70 22 3a 22 50 52 4f 20 53 69 67 6e 20 55 70 22 2c 22 66 72 65 65 5f 73 69 67 6e 75 70 22 3a 22 46 52 45 45 20 53 69 67 6e 20 55 70 22 2c 22 6c 61 74 65 72 5f 73 69 67 6e 75 70 22 3a 22 4f 72 20 74 72 79 20 63 72 65 61 74 69 6e 67 20 79 6f 75 72 20 66 69 72 73 74 20 73 75 72 76 65 79 20 62 65 6c 6f 77 2c 20 72 69 67 68 74 20 61 77 61 79 2c 20 61 6e 64 Data Ascii: ment...) to answer this question. Files need to be under 10MB.","wait":"Wait...","button1":"Create Survey","preview":"Preview","pro_signup":"PRO Sign Up","free_signup":"FREE Sign Up","later_signup":"Or try creating your first survey below, right away, and
2024-03-18 16:19:21 UTC	4730	IN	Data Raw: 72 20 6e 65 65 64 73 20 74 6f 20 75 70 67 72 61 64 65 20 74 6f 20 74 68 65 20 50 4c 55 53 20 70 6c 61 6e 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 75 6e 6c 6f 63 6b 20 74 68 65 20 72 65 73 75 6c 74 73 20 70 61 67 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 6d 2e 20 49 66 20 79 6f 75 20 61 72 65 20 74 68 65 20 73 75 72 76 65 79 20 63 72 65 61 74 6f 72 2c 20 70 6c 65 61 73 65 20 75 70 67 72 61 64 65 2e 20 22 2c 22 70 72 69 6e 74 65 72 5f 66 72 69 65 6e 64 6c 79 22 3a 22 46 6f 72 20 61 20 6d 6f 72 65 20 70 72 69 6e 74 65 72 2d 66 72 69 65 6e 64 6c 79 20 76 65 72 73 69 6f 6e 20 6f 66 20 79 6f 75 72 20 73 75 72 76 65 79 20 72 65 73 75 6c 74 73 22 2c 22 63 6c 69 63 6b 5f 68 65 72 65 22 3a 22 63 6c 69 63 6b 20 68 65 72 65 22 2c 22 72 65 73 70 6f 6e 64 65 6e 74 73 Data Ascii: r needs to upgrade to the PLUS plan in order to unlock the results page and share them. If you are the survey creator, please upgrade. ","printer_friendly":"For a more printer-friendly version of your survey results","click_here":"click here","respondents
2024-03-18 16:19:21 UTC	10674	IN	Data Raw: 65 20 66 6f 72 20 50 4c 55 53 20 61 63 63 6f 75 6e 74 73 2e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 6e 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 6e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 66 66 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 66 66 22 2c 22 74 75 72 6e 5f 6f 66 66 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 66 66 20 62 72 61 6e 64 69 6e 67 22 2c 22 74 75 72 6e 5f 6f 6e 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 6e 20 62 72 61 6e 64 69 6e 67 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 22 3a 22 53 75 72 76 65 79 20 4c 61 79 6f 75 74 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 32 22 3a 22 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 71 75 65 73 74 69 6f 6e 73 20 69 6e 20 79 6f 75 72 20 73 75 72 76 65 79 20 61 72 65 20 Data Ascii: e for PLUS accounts.","branding_on":"Branding on","branding_off":"Branding off","turn_off_branding":"Turn off branding","turn_on_branding":"Turn on branding","survey_display":"Survey Layout","survey_display2":"By default, the questions in your survey are
2024-03-18 16:19:21 UTC	910	IN	Data Raw: 6b 42 4d 6f 6b 42 7a 58 52 4f 51 3d 3d 22 20 2f 3e 0a 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 64 6d 69 6e 73 22 20 63 6f 6e 74 65 6e 74 3d 22 36 39 37 37 31 35 31 39 35 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 75 72 76 65 79 4e 75 74 73 20 69 73 20 61 6e 20 6f 6e 6c 69 6e 65 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 64 65 73 69 67 6e 65 64 20 74 6f 20 68 65 6c 70 20 75 73 65 72 73 20 71 75 Data Ascii: kBMokBzXROQ==" /><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta property="fb:admins" content="697715195" /><meta name="description" content="SurveyNuts is an online survey software designed to help users qu
2024-03-18 16:19:21 UTC	5792	IN	Data Raw: 32 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 20 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 74 Data Ascii: 2-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i) ;function s(e,t){e.prototype[t]=function(){ t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49779	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:22 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1039 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:22 UTC	1039	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 31 36 31 31 30 39 34 62 30 66 34 62 34 30 31 38 33 30 36 31 64 35 62 32 34 33 66 31 34 31 65 66 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 36 30 39 37 37 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=1611094b0f4b40183061d5b243f141ef&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778760977%2C%22event_id%22%3A3%2C%22session_id%22%3A1710
2024-03-18 16:19:22 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:22 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f8698a-7ab99c6a05337cc41303c25b Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:22 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49781	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:22 UTC	649	OUT	GET /in.php?site_id=100724983&href=%2Fen%2Flogin&title=Login%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=3czbrm HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:22 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:22 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b41dedd1770-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:22 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:19:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49782	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:22 UTC	649	OUT	GET /in.php?site_id=101089440&href=%2Fen%2Flogin&title=Login%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=d8usse HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:22 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:22 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b439d440f47-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:22 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49786	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:22 UTC	1318	OUT	GET /td/rul/1047174163?random=1710778761366&cv=11&fst=1710778761366&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:19:23 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkutd1eBXCLsJVnw5PSwEFjJZvJC-M5_wTrEeR5fYV6Gd_r7eAQfDGRVY0C; expires=Wed, 18-Mar-2026 16:19:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:23 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49787	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:23 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:23 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f8698b-487339f450a18f8f6e9f9c69 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:23 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:23 UTC	1194	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778761366&cv=11&fst=1710778761366&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-18 16:19:23 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r; expires=Wed, 18-Mar-2026 16:19:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:23 UTC	241	IN	Data Raw: 38 64 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 Data Ascii: 8d8(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;br
2024-03-18 16:19:23 UTC	1252	IN	Data Raw: 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b Data Ascii: eak a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break
2024-03-18 16:19:23 UTC	778	IN	Data Raw: 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 41 33 4e 7a 67 33 4e 6a 45 7a 4e 6a 59 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 Data Ascii: ined"==typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTA3Nzg3NjEzNjY',['https://www.google.com/pagead/1p-us
2024-03-18 16:19:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:23 UTC	1253	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778761366&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOFqyPiw8C_fmiVSugVScwcUICePQxTuZmEGA8Gpw7yvxvAJu&random=2242437211&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49791	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:24 UTC	1019	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778761366&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqOFqyPiw8C_fmiVSugVScwcUICePQxTuZmEGA8Gpw7yvxvAJu&random=2242437211&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:25 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49776	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:26 UTC	1249	OUT	GET /en/register HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc2MDk3NywiZXZlbnRJZCI6MywiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjN9
2024-03-18 16:19:26 UTC	924	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778766&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=fK3Hg%2F9LmQPso%2BWOGg1bNzgwPmcLzif95Oe7Ro%2Fs4pI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778766&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=fK3Hg%2F9LmQPso%2BWOGg1bNzgwPmcLzif95Oe7Ro%2Fs4pI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:26 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"40780e4664459d108e8a8a069b3a4900" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: a4b4e7de-1007-4879-93e0-aca62c6b6830 X-Runtime: 0.016391 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:26 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 53 69 67 6e 20 75 70 20 74 6f 20 53 75 72 76 65 79 4e 75 74 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 5f 74 65 78 74 20 3d Data Ascii: <!DOCTYPE html><html><head><title>Sign up to SurveyNuts</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale = "en"; var locale_text =
2024-03-18 16:19:26 UTC	3558	IN	Data Raw: 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 25 7b 63 6f 75 6e 74 7d 22 Data Ascii: r)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater than or equal to %{count}"
2024-03-18 16:19:26 UTC	4744	IN	Data Raw: 74 5f 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 65 69 6e 67 20 62 75 69 6c 74 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 20 4d Data Ascii: t_subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview being built in real-time. M
2024-03-18 16:19:26 UTC	2358	IN	Data Raw: 22 49 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 79 6f 75 72 20 72 65 73 75 6c 74 73 20 62 65 66 6f 72 65 20 64 69 Data Ascii: "In real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview of your results before di
2024-03-18 16:19:26 UTC	7116	IN	Data Raw: 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 65 73 70 6f 6e 64 20 74 6f 20 6d 6f 73 74 20 72 65 71 75 65 73 74 73 20 62 79 Data Ascii: ,"feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We respond to most requests by
2024-03-18 16:19:26 UTC	8302	IN	Data Raw: 79 73 20 77 69 74 68 20 53 75 72 76 65 79 4e 75 74 73 20 6e 6f 77 2e 22 2c 22 68 6f 6d 65 36 22 3a 22 4f 75 72 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 68 65 6c 70 73 20 63 6f 6d 70 61 6e 69 65 73 20 61 6e 64 20 73 74 75 64 65 6e 74 73 20 63 72 65 61 74 65 20 77 65 62 20 61 6e 64 20 6d 6f 62 69 6c 65 20 73 75 72 76 65 79 73 2c 20 67 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 73 20 61 6e 64 20 61 6e 61 6c 79 7a 65 20 74 68 65 20 72 65 73 75 6c 74 73 2e 20 22 2c 22 68 6f 6d 65 37 22 3a 22 43 72 65 61 74 65 20 73 75 72 76 65 79 73 22 2c 22 62 62 61 72 31 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 75 73 22 2c 22 62 62 61 72 32 22 3a 22 74 65 72 6d 73 20 5c 75 30 30 32 36 20 63 6f 6e 64 69 74 69 6f 6e 73 22 2c 22 62 62 61 72 33 22 3a 22 53 75 72 Data Ascii: ys with SurveyNuts now.","home6":"Our survey software helps companies and students create web and mobile surveys, gather responses and analyze the results. ","home7":"Create surveys","bbar1":"Connect with us","bbar2":"terms \u0026 conditions","bbar3":"Sur
2024-03-18 16:19:26 UTC	1958	IN	Data Raw: 20 73 68 61 72 65 20 69 74 20 72 69 67 68 74 20 61 66 74 65 72 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 69 72 20 61 6e 73 77 65 72 73 2e 20 57 65 20 77 69 6c 6c 20 61 64 64 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 20 66 6f 72 20 76 61 72 69 6f 75 73 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 6c 61 74 66 6f 72 6d 20 69 6e 76 69 74 69 6e 67 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 73 75 72 76 65 79 20 61 74 20 74 68 65 20 65 6e 64 2e 22 2c 22 6e 6f 5f 73 68 61 72 65 22 3a 22 4e 6f 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 22 2c 22 61 64 64 5f 74 68 65 6d 22 3a 22 41 64 64 20 74 68 65 6d 22 2c 22 73 68 61 72 65 5f 61 63 74 69 76 65 22 3a 22 53 68 61 72 65 20 62 75 74 74 6f Data Ascii: share it right after submitting their answers. We will add share buttons for various social networks and communication platform inviting them to share the survey at the end.","no_share":"No share buttons","add_them":"Add them","share_active":"Share butto
2024-03-18 16:19:27 UTC	10674	IN	Data Raw: 62 6c 65 20 66 6f 72 20 50 4c 55 53 20 61 63 63 6f 75 6e 74 73 2e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 6e 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 6e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 66 66 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 66 66 22 2c 22 74 75 72 6e 5f 6f 66 66 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 66 66 20 62 72 61 6e 64 69 6e 67 22 2c 22 74 75 72 6e 5f 6f 6e 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 6e 20 62 72 61 6e 64 69 6e 67 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 22 3a 22 53 75 72 76 65 79 20 4c 61 79 6f 75 74 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 32 22 3a 22 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 71 75 65 73 74 69 6f 6e 73 20 69 6e 20 79 6f 75 72 20 73 75 72 76 65 79 20 61 72 Data Ascii: ble for PLUS accounts.","branding_on":"Branding on","branding_off":"Branding off","turn_off_branding":"Turn off branding","turn_on_branding":"Turn on branding","survey_display":"Survey Layout","survey_display2":"By default, the questions in your survey ar
2024-03-18 16:19:27 UTC	910	IN	Data Raw: 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 79 61 74 37 2b 52 49 49 69 6f 6d 74 6d 41 67 48 55 51 46 30 4e 42 2b 51 70 59 6c 4a 56 4d 61 6e 62 47 53 64 4e 2b 58 49 52 2b 6b 32 75 68 58 69 35 66 74 74 52 66 66 37 68 63 61 6d 65 4d 35 70 79 45 67 59 37 79 63 32 71 68 58 4c 43 53 68 4e 46 59 4f 50 4a 51 3d 3d 22 20 2f 3e 0a 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 64 6d 69 6e 73 22 20 63 6f 6e 74 65 6e 74 3d 22 36 39 37 37 31 35 31 39 35 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: ken" content="yat7+RIIiomtmAgHUQF0NB+QpYlJVManbGSdN+XIR+k2uhXi5fttRff7hcameM5pyEgY7yc2qhXLCShNFYOPJQ==" /><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta property="fb:admins" content="697715195" /><meta name
2024-03-18 16:19:27 UTC	2896	IN	Data Raw: 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3b 72 2e 61 73 79 6e 63 3d 74 72 75 65 0a 20 20 3b 72 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 35 2e 32 2e 32 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 Data Ascii: ssOrigin="anonymous";r.async=true ;r.src="https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49798	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	1239	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778766485&cv=11&fst=1710778766485&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:27 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:27 UTC	549	IN	Data Raw: 38 64 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8df(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:27 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:27 UTC	477	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 25 32 46 72 65 67 69 73 74 65 72 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 69 67 6e 25 32 30 75 70 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen%2Fregister\x26frm\x3d0\x26tiba\x3dSign%20up
2024-03-18 16:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49806	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	656	OUT	GET /in.php?site_id=100724983&href=%2Fen%2Fregister&title=Sign%20up%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=gby7te HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:27 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:27 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b627bdc1967-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:27 UTC	168	IN	Data Raw: 61 32 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 79 65 73 27 3b 0a 7d 0a 0d 0a Data Ascii: a2if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='yes';}
2024-03-18 16:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49799	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	1363	OUT	GET /td/rul/1047174163?random=1710778766485&cv=11&fst=1710778766485&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:27 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:27 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49797	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:27 UTC	1043	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 31 35 33 30 30 65 37 38 39 62 30 39 62 31 35 38 62 35 32 62 39 64 30 62 63 31 66 66 62 30 66 64 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 36 36 34 36 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 34 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=15300e789b09b158b52b9d0bc1ffb0fd&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778766463%2C%22event_id%22%3A4%2C%22session_id%22%3A1710
2024-03-18 16:19:28 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f8698f-05de3c4a1440cd7d1d252430 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:28 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49807	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	656	OUT	GET /in.php?site_id=101089440&href=%2Fen%2Fregister&title=Sign%20up%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=cdjbfe HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:28 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:28 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b642ae04390-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:28 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49808	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:27 UTC	1260	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778766485&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9DrCzuJ7ZG_dgGF_Gg5krjyh6FgPM4H2GFVBWZwEXrYG9LdN&random=2830410666&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49816	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:28 UTC	1026	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778766485&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9DrCzuJ7ZG_dgGF_Gg5krjyh6FgPM4H2GFVBWZwEXrYG9LdN&random=2830410666&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49814	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:28 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:28 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f86990-4b98d22c3a7124d0137ee2d9 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:28 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49792	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:30 UTC	1246	OUT	GET /en/blogs HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc2NjQ2MywiZXZlbnRJZCI6NCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjR9
2024-03-18 16:19:30 UTC	916	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778770&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=fs51ZSzkmXpXIHQvbQJ%2F1XiCCjMDYiKejk2ucSLVXDM%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778770&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=fs51ZSzkmXpXIHQvbQJ%2F1XiCCjMDYiKejk2ucSLVXDM%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:30 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"3a5c03fb10ff371b0e837e6f0abd5b93" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: be5c1b5c-c457-4c7f-9c28-3e95707ad8df X-Runtime: 0.022278 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:30 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 42 6c 6f 67 20 61 62 6f 75 74 20 73 75 72 76 65 79 73 2c 20 6f 70 69 6e 69 6f 6e 20 70 6f 6c 6c 73 20 61 6e 64 20 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 73 20 7c 20 53 75 72 76 65 79 4e 75 74 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 Data Ascii: <!DOCTYPE html><html><head><title>Blog about surveys, opinion polls and questionnaires \| SurveyNuts</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale
2024-03-18 16:19:30 UTC	524	IN	Data Raw: 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 31 20 63 68 61 72 61 63 74 65 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 Data Ascii: ":"is the wrong length (should be 1 character)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to"
2024-03-18 16:19:30 UTC	4744	IN	Data Raw: 65 76 65 6e 22 2c 22 74 61 6b 65 6e 22 3a 22 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 61 6b 65 6e 22 7d 7d 2c 22 61 63 74 69 76 65 72 65 63 6f 72 64 22 3a 7b 22 65 72 72 6f 72 73 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 72 65 63 6f 72 64 5f 69 6e 76 61 6c 69 64 22 3a 22 56 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 3a 20 25 7b 65 72 72 6f 72 73 7d 22 2c 22 72 65 73 74 72 69 63 74 5f 64 65 70 65 6e 64 65 6e 74 5f 64 65 73 74 72 6f 79 22 3a 7b 22 6f 6e 65 22 3a 22 43 61 6e 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 62 65 63 61 75 73 65 20 61 20 64 65 70 65 6e 64 65 6e 74 20 25 7b 72 65 63 6f 72 64 7d 20 65 78 69 73 74 73 22 2c 22 6d 61 6e 79 22 3a 22 43 61 6e 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 62 65 63 Data Ascii: even","taken":"has already been taken"}},"activerecord":{"errors":{"messages":{"record_invalid":"Validation failed: %{errors}","restrict_dependent_destroy":{"one":"Cannot delete record because a dependent %{record} exists","many":"Cannot delete record bec
2024-03-18 16:19:30 UTC	5392	IN	Data Raw: 75 73 74 6f 6d 69 7a 65 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 77 69 74 68 20 79 6f 75 72 20 6f 77 6e 20 48 54 4d 4c 20 63 6f 64 65 20 61 6e 64 20 69 6e 74 65 67 72 61 74 65 20 61 6e 79 74 68 69 6e 67 20 79 6f 75 20 77 61 6e 74 2c 20 73 75 63 68 20 61 73 20 61 20 76 69 64 65 6f 20 74 68 61 74 20 70 65 6f 70 6c 65 20 63 6f 75 6c 64 20 77 61 74 63 68 20 62 65 66 6f 72 65 20 61 6e 73 77 65 72 69 6e 67 20 74 68 65 20 6e 65 78 74 20 71 75 65 73 74 69 6f 6e 20 21 20 50 72 65 74 74 79 20 63 6f 6f 6c 2c 20 68 75 68 20 3f 22 2c 22 66 65 61 74 36 5f 74 69 74 6c 65 22 3a 22 46 69 6c 65 20 75 70 6c 6f 61 64 22 2c 22 66 65 61 74 36 5f 64 65 73 63 22 3a 22 43 6f 6c 6c 65 63 74 20 66 69 6c 65 73 20 6f 66 20 61 6c 6c 20 74 79 70 65 73 20 66 72 6f 6d 20 79 6f 75 72 Data Ascii: ustomize your messages with your own HTML code and integrate anything you want, such as a video that people could watch before answering the next question ! Pretty cool, huh ?","feat6_title":"File upload","feat6_desc":"Collect files of all types from your
2024-03-18 16:19:30 UTC	2896	IN	Data Raw: 73 77 65 72 73 20 61 74 20 61 6e 79 74 69 6d 65 2c 20 6f 72 20 65 76 65 6e 20 72 65 2d 6f 70 65 6e 20 69 74 20 6c 61 74 65 72 2e 22 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 Data Ascii: swers at anytime, or even re-open it later.","feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","
2024-03-18 16:19:30 UTC	5792	IN	Data Raw: 76 69 64 75 61 6c 6c 79 20 6f 72 20 67 72 6f 75 70 65 64 2c 20 65 78 70 6f 72 74 20 74 68 65 20 64 61 74 61 2c 20 61 6e 64 20 72 65 61 63 68 20 6f 75 74 20 74 6f 20 74 68 6f 73 65 20 77 68 6f 20 65 6e 74 65 72 65 64 20 74 68 65 69 72 20 65 6d 61 69 6c 73 22 2c 22 72 65 61 64 79 22 3a 22 52 65 61 64 79 20 74 6f 20 53 74 61 72 74 20 3f 22 2c 22 73 69 67 6e 75 70 22 3a 22 53 69 67 6e 20 75 70 20 21 22 2c 22 63 75 73 74 6f 6d 65 72 73 5f 6c 6f 67 6f 22 3a 22 4d 6f 72 65 20 74 68 61 6e 20 31 30 30 2e 30 30 30 20 63 75 73 74 6f 6d 65 72 73 20 74 72 75 73 74 20 53 75 72 76 65 79 4e 75 74 73 20 66 6f 72 20 74 68 65 69 72 20 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 73 2c 20 6f 6e 6c 69 6e 65 20 66 6f 72 6d 73 2c 20 61 6e 64 20 72 65 73 65 61 72 63 68 20 70 72 6f 6a Data Ascii: vidually or grouped, export the data, and reach out to those who entered their emails","ready":"Ready to Start ?","signup":"Sign up !","customers_logo":"More than 100.000 customers trust SurveyNuts for their questionnaires, online forms, and research proj
2024-03-18 16:19:30 UTC	9488	IN	Data Raw: 61 62 6c 65 22 2c 22 74 68 69 73 5f 66 65 61 74 75 72 65 5f 69 73 5f 6f 6e 6c 79 5f 61 76 61 69 6c 61 62 6c 65 5f 74 6f 5f 70 72 65 6d 69 75 6d 5f 68 65 79 63 72 6f 77 64 5f 6d 65 6d 62 65 72 73 22 3a 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 66 65 61 74 75 72 65 22 2c 22 72 65 73 75 6c 74 73 5f 66 6f 72 5f 70 72 65 6d 69 75 6d 22 3a 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 73 65 63 74 69 6f 6e 22 2c 22 61 6c 6d 6f 73 74 5f 72 65 61 64 79 22 3a 22 59 6f 75 27 72 65 20 61 6c 6d 6f 73 74 20 72 65 61 64 79 20 74 6f 20 63 72 65 61 74 65 20 73 75 72 76 65 79 73 20 21 22 2c 22 61 6c 6d 6f 73 74 5f 72 65 61 64 79 32 22 3a 22 53 69 67 6e 20 75 70 22 2c 22 74 65 Data Ascii: able","this_feature_is_only_available_to_premium_heycrowd_members":"You don't have access to this feature","results_for_premium":"You don't have access to this section","almost_ready":"You're almost ready to create surveys !","almost_ready2":"Sign up","te
2024-03-18 16:19:30 UTC	3544	IN	Data Raw: 6f 6e 6e 65 63 74 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 70 75 6c 61 72 20 61 70 70 73 20 73 75 63 68 20 61 73 20 47 6d 61 69 6c 2c 20 4d 61 69 6c 43 68 69 6d 70 20 6f 72 20 47 6f 6f 67 6c 65 20 53 68 65 65 74 73 20 28 61 6e 64 20 68 75 6e 64 72 65 64 73 20 6d 6f 72 65 21 29 2e 22 2c 22 61 70 69 5f 69 6e 76 69 74 65 5f 6f 6e 6c 79 22 3a 22 53 75 72 76 65 79 4e 75 74 73 20 69 6e 74 65 67 72 61 74 69 6f 6e 20 6f 6e 20 5a 61 70 69 65 72 20 69 73 20 69 6e 76 69 74 65 2d 6f 6e 6c 79 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 2c 20 75 73 65 20 74 68 69 73 20 6c 69 6e 6b 22 2c 22 77 61 69 74 5f 65 78 70 6f 72 74 22 3a 22 59 6f 75 72 20 65 78 70 6f 72 74 20 74 61 62 6c 65 20 66 69 6c 65 20 69 73 20 62 65 69 6e 67 20 70 72 65 70 61 72 65 64 2e 20 50 6c 65 61 73 Data Ascii: onnect with other popular apps such as Gmail, MailChimp or Google Sheets (and hundreds more!).","api_invite_only":"SurveyNuts integration on Zapier is invite-only at the moment, use this link","wait_export":"Your export table file is being prepared. Pleas
2024-03-18 16:19:31 UTC	7240	IN	Data Raw: 75 72 20 70 61 73 73 77 6f 72 64 2c 20 6f 72 20 6a 75 73 74 20 77 61 6e 74 20 74 6f 20 63 68 61 6e 67 65 20 69 74 2c 20 65 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 61 6e 64 20 77 65 27 6c 6c 20 73 65 6e 64 20 79 6f 75 20 61 20 6c 69 6e 6b 20 66 6f 72 20 73 65 74 74 69 6e 67 20 75 70 20 61 20 6e 65 77 20 70 61 73 73 77 6f 72 64 20 3a 22 2c 22 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 22 3a 22 53 75 62 6d 69 74 20 62 75 74 74 6f 6e 22 2c 22 66 72 65 65 5f 74 72 69 61 6c 22 3a 22 46 72 65 65 20 54 72 69 61 6c 22 2c 22 74 72 79 5f 73 6e 6f 77 71 75 69 7a 22 3a 22 57 61 6e 74 20 74 6f 20 74 72 79 20 53 6e 6f 77 51 75 69 7a 20 66 6f 72 20 37 20 64 61 79 73 20 62 65 66 6f 72 65 20 6d 61 6b 69 6e 67 20 61 20 64 65 63 69 73 69 6f 6e 20 Data Ascii: ur password, or just want to change it, enter your email address and we'll send you a link for setting up a new password :","submit_button":"Submit button","free_trial":"Free Trial","try_snowquiz":"Want to try SnowQuiz for 7 days before making a decision
2024-03-18 16:19:31 UTC	2896	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 35 2e 32 2e 32 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 20 3b Data Ascii: "https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i) ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49822	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:31 UTC	1294	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778770484&cv=11&fst=1710778770484&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:31 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:31 UTC	549	IN	Data Raw: 39 31 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 916(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:31 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:31 UTC	532	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 25 32 46 62 6c 6f 67 73 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 42 6c 6f 67 25 32 30 61 62 6f 75 74 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs\x26frm\x3d0\x26tiba\x3dBlog%20about
2024-03-18 16:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49823	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:31 UTC	1418	OUT	GET /td/rul/1047174163?random=1710778770484&cv=11&fst=1710778770484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:31 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:31 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49824	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:31 UTC	711	OUT	GET /in.php?site_id=100724983&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=1mziox HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:31 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:31 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b7b9dcf42ce-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:31 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49825	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:31 UTC	711	OUT	GET /in.php?site_id=101089440&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=brm1p7 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:31 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:31 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b7babc078e2-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:31 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49821	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:31 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1048 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:31 UTC	1048	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 31 66 62 64 32 34 30 64 61 35 65 39 38 63 36 34 66 36 66 63 33 35 32 65 32 34 30 36 36 31 38 36 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 37 30 34 36 36 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 35 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=1fbd240da5e98c64f6fc352e24066186&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778770466%2C%22event_id%22%3A5%2C%22session_id%22%3A1710
2024-03-18 16:19:32 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f86993-0383a9df17de3a9572b08cc2 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:32 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49826	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:32 UTC	1315	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778770484&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdT2y467nzfHTbHdNwa1Rn1oBRwCy9fc-Vtt5kCy1epVlFuUE&random=4182725333&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49827	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:32 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:32 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f86994-15bc51050b33ea4660e05db3 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:32 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49828	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:32 UTC	1081	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778770484&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdT2y467nzfHTbHdNwa1Rn1oBRwCy9fc-Vtt5kCy1epVlFuUE&random=4182725333&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49820	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:35 UTC	1248	OUT	GET /v/6d64cd21 HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc3MDQ2NiwiZXZlbnRJZCI6NSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjV9
2024-03-18 16:19:35 UTC	924	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778775&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=sQdLUfkvLOJoLiHN3%2B%2Bxy29ohOQ98%2FaHOrlrYhaaHEc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778775&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=sQdLUfkvLOJoLiHN3%2B%2Bxy29ohOQ98%2FaHOrlrYhaaHEc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:35 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"53bf74311578b068eeea8d9daccbbfcf" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 2531bbbf-9126-469e-8486-3c657847ad08 X-Runtime: 0.033793 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:35 UTC	2372	IN	Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 09 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="description" content=""><meta name="apple-mobile-web
2024-03-18 16:19:35 UTC	3558	IN	Data Raw: 29 61 3d 67 5b 64 5d 2c 63 3d 65 5b 64 5d 2c 67 21 3d 3d 63 26 26 28 6a 26 26 63 26 26 28 6e 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 63 29 7c 7c 28 62 3d 6e 2e 69 73 41 72 72 61 79 28 63 29 29 29 3f 28 62 3f 28 62 3d 21 31 2c 66 3d 61 26 26 6e 2e 69 73 41 72 72 61 79 28 61 29 3f 61 3a 5b 5d 29 3a 66 3d 61 26 26 6e 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 61 29 3f 61 3a 7b 7d 2c 67 5b 64 5d 3d 6e 2e 65 78 74 65 6e 64 28 6a 2c 66 2c 63 29 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 67 5b 64 5d 3d 63 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a Data Ascii: )a=g[d],c=e[d],g!==c&&(j&&c&&(n.isPlainObject(c)\|\|(b=n.isArray(c)))?(b?(b=!1,f=a&&n.isArray(a)?a:[]):f=a&&n.isPlainObject(a)?a:{},g[d]=n.extend(j,f,c)):void 0!==c&&(g[d]=c));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:
2024-03-18 16:19:35 UTC	4744	IN	Data Raw: 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 2c 52 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 2c 22 2b 4c 2b 22 2a 22 29 2c 53 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4c 2b 22 29 22 2b 4c 2b 22 2a 22 29 2c 54 3d 6e 65 77 20 52 65 67 45 78 70 28 22 3d 22 2b 4c 2b 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 3f 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 22 67 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4f 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 24 22 29 2c 57 3d 7b 49 44 3a 6e 65 77 20 52 65 Data Ascii: RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.))"+L+"+$","g"),R=new RegExp("^"+L+","+L+""),S=new RegExp("^"+L+"([>+~]\|"+L+")"+L+""),T=new RegExp("="+L+"([^\\]'\"]?)"+L+"\\]","g"),U=new RegExp(O),V=new RegExp("^"+M+"$"),W={ID:new Re
2024-03-18 16:19:35 UTC	2358	IN	Data Raw: 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 75 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 Data Ascii: =typeof b.getElementsByClassName&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-\r\\' msallowcapture=''><option selected=''></option></se
2024-03-18 16:19:35 UTC	4344	IN	Data Raw: 26 26 21 41 5b 62 2b 22 20 22 5d 26 26 28 21 72 7c 7c 21 72 2e 74 65 73 74 28 62 29 29 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 62 29 29 29 74 72 79 7b 76 61 72 20 64 3d 73 2e 63 61 6c 6c 28 61 2c 62 29 3b 69 66 28 64 7c 7c 63 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 66 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 66 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 21 3d 3d 6e 26 26 6d 28 61 29 2c 74 28 61 2c 62 Data Ascii: &&!A[b+" "]&&(!r\|\|!r.test(b))&&(!q\|\|!q.test(b)))try{var d=s.call(a,b);if(d\|\|c.disconnectedMatch\|\|a.document&&11!==a.document.nodeType)return d}catch(e){}return fa(b,n,null,[a]).length>0},fa.contains=function(a,b){return(a.ownerDocument\|\|a)!==n&&m(a),t(a,b
2024-03-18 16:19:35 UTC	8302	IN	Data Raw: 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 70 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 Data Ascii: "+a),a=a.replace(ba,ca).toLowerCase(),function(b){var c;do if(c=p?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c===a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a
2024-03-18 16:19:35 UTC	9488	IN	Data Raw: 61 69 6e 4f 62 6a 65 63 74 28 62 29 29 66 6f 72 28 65 20 69 6e 20 62 29 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 5b 65 5d 29 3f 74 68 69 73 5b 65 5d 28 62 5b 65 5d 29 3a 74 68 69 73 2e 61 74 74 72 28 65 2c 62 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 5b 32 5d 29 2c 66 26 26 66 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 66 2e 69 64 21 3d 3d 65 5b 32 5d 29 72 65 74 75 72 6e 20 41 2e 66 69 6e 64 28 61 29 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 66 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 64 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 7d 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 54 79 70 65 3f 28 74 68 Data Ascii: ainObject(b))for(e in b)n.isFunction(this[e])?this[e](b[e]):this.attr(e,b[e]);return this}if(f=d.getElementById(e[2]),f&&f.parentNode){if(f.id!==e[2])return A.find(a);this.length=1,this[0]=f}return this.context=d,this.selector=a,this}return a.nodeType?(th
2024-03-18 16:19:35 UTC	4226	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 6e 2e 5f 64 61 74 61 28 61 2c 63 29 7c 7c 6e 2e 5f 64 61 74 61 28 61 2c 63 2c 7b 65 6d 70 74 79 3a 6e 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 5f 72 65 6d 6f 76 65 44 61 74 61 28 61 2c 62 2b 22 71 75 65 75 65 22 29 2c 6e 2e 5f 72 65 6d 6f 76 65 44 61 74 61 28 61 2c 63 29 7d 29 7d 29 7d 7d 29 2c 6e 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 62 3d 61 2c 61 3d 22 66 78 22 2c 63 2d 2d 29 2c 61 72 67 75 6d 65 Data Ascii: ion(a,b){var c=b+"queueHooks";return n._data(a,c)\|\|n._data(a,c,{empty:n.Callbacks("once memory").add(function(){n._removeData(a,b+"queue"),n._removeData(a,c)})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),argume
2024-03-18 16:19:35 UTC	2600	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d 63 5b 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6e 2e 6e 6f 64 65 4e 61 6d 65 28 64 2c 62 29 3f 66 2e 70 75 73 68 28 64 29 3a 6e 2e 6d 65 72 67 65 28 66 2c 65 61 28 64 2c 62 29 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 62 7c 7c 62 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 62 29 3f 6e 2e 6d 65 72 67 65 28 5b 61 5d 2c 66 29 3a 66 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ByTagName(b\|\|""):"undefined"!=typeof a.querySelectorAll?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=c[e]);e++)!b\|\|n.nodeName(d,b)?f.push(d):n.merge(f,ea(d,b));return void 0===b\|\|b&&n.nodeName(a,b)?n.merge([a],f):f}function
2024-03-18 16:19:35 UTC	2896	IN	Data Raw: 3d 3d 61 2e 74 79 70 65 3f 76 6f 69 64 20 30 3a 6e 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 61 70 70 6c 79 28 6b 2e 65 6c 65 6d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6b 2e 65 6c 65 6d 3d 61 29 2c 62 3d 28 62 7c 7c 22 22 29 2e 6d 61 74 63 68 28 47 29 7c 7c 5b 22 22 5d 2c 68 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 66 3d 6f 61 2e 65 78 65 63 28 62 5b 68 5d 29 7c 7c 5b 5d 2c 6f 3d 71 3d 66 5b 31 5d 2c 70 3d 28 66 5b 32 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6f 72 74 28 29 2c 6f 26 26 28 6a 3d 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 5d 7c 7c 7b 7d 2c 6f 3d 28 65 3f 6a 2e 64 65 6c 65 67 61 74 65 54 79 70 65 3a 6a 2e 62 69 6e 64 54 79 70 65 29 7c 7c 6f 2c 6a 3d 6e 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c Data Ascii: ==a.type?void 0:n.event.dispatch.apply(k.elem,arguments)},k.elem=a),b=(b\|\|"").match(G)\|\|[""],h=b.length;while(h--)f=oa.exec(b[h])\|\|[],o=q=f[1],p=(f[2]\|\|"").split(".").sort(),o&&(j=n.event.special[o]\|\|{},o=(e?j.delegateType:j.bindType)\|\|o,j=n.event.special

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49795	54.231.230.225	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:35 UTC	602	OUT	GET /img/squirrel-wy-30.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:35 UTC	414	IN	HTTP/1.1 200 OK x-amz-id-2: c+jqT2m3SuGD9ErsCjVcZoH+kiFSLQqsGXLmFpxiZ5/mmLZGPJH4r4yRac0XDAgyFKBJWkufGmE= x-amz-request-id: 8ES94T9HYWSH49D1 Date: Mon, 18 Mar 2024 16:19:36 GMT Last-Modified: Wed, 29 Mar 2023 16:49:16 GMT ETag: "0e90a64446b5aa95a1c2f6c6c999b7e2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 5806 Connection: close
2024-03-18 16:19:35 UTC	5806	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 0c 40 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 1b 21 09 10 4a 88 81 a0 62 2f 8b 0a ae 05 15 11 b0 a1 ab 22 8a 1d 10 3b 62 67 51 6c d8 17 0b 2a ca ba 58 b0 2b 6f 52 40 d7 7d e5 7b f3 7d 73 e7 bf ff 9c f9 cf 99 73 67 ee bd 03 80 fa 09 ae 58 9c 83 6a 00 90 2b 2a 90 c4 06 fb 33 c6 26 a7 30 48 4f 00 19 68 00 15 60 07 6c b8 bc 7c 31 2b 3a 3a 1c c0 32 d8 fe bd bc bb 01 10 59 7b d5 41 a6 f5 cf fe ff 5a 34 f9 82 7c 1e 00 48 34 c4 69 fc 7c 5e 2e c4 07 00 c0 ab 79 62 49 01 00 44 19 6f 3e a5 40 2c c3 b0 02 6d 09 0c 10 e2 45 32 9c a1 c0 d5 32 9c a6 c0 7b e4 36 f1 b1 6c Data Ascii: PNGIHDR;0@iCCPICC ProfileHWXS[R!RBoRBhw!Jb/";bgQlX+oR@}{}ssgXj+3&0HOh`l\|1+::2Y{AZ4\|H4i\|^.ybIDo>@,mE22{6l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49831	54.231.202.161	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:36 UTC	368	OUT	GET /img/squirrel-wy-30.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:36 UTC	414	IN	HTTP/1.1 200 OK x-amz-id-2: t1rD0UAvxwDQjNtrPn1QMCBFi50XOejVg99MzWmP0NNKFwOSt5ozhOJ/+77WiuK5930cgRy1SUY= x-amz-request-id: VW6Z0K4Y0EDMWTRV Date: Mon, 18 Mar 2024 16:19:37 GMT Last-Modified: Wed, 29 Mar 2023 16:49:16 GMT ETag: "0e90a64446b5aa95a1c2f6c6c999b7e2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 5806 Connection: close
2024-03-18 16:19:36 UTC	5806	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 0c 40 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 52 21 b4 00 02 52 42 6f 82 88 94 00 52 42 68 a1 77 04 1b 21 09 10 4a 88 81 a0 62 2f 8b 0a ae 05 15 11 b0 a1 ab 22 8a 1d 10 3b 62 67 51 6c d8 17 0b 2a ca ba 58 b0 2b 6f 52 40 d7 7d e5 7b f3 7d 73 e7 bf ff 9c f9 cf 99 73 67 ee bd 03 80 fa 09 ae 58 9c 83 6a 00 90 2b 2a 90 c4 06 fb 33 c6 26 a7 30 48 4f 00 19 68 00 15 60 07 6c b8 bc 7c 31 2b 3a 3a 1c c0 32 d8 fe bd bc bb 01 10 59 7b d5 41 a6 f5 cf fe ff 5a 34 f9 82 7c 1e 00 48 34 c4 69 fc 7c 5e 2e c4 07 00 c0 ab 79 62 49 01 00 44 19 6f 3e a5 40 2c c3 b0 02 6d 09 0c 10 e2 45 32 9c a1 c0 d5 32 9c a6 c0 7b e4 36 f1 b1 6c Data Ascii: PNGIHDR;0@iCCPICC ProfileHWXS[R!RBoRBhw!Jb/";bgQlX+oR@}{}ssgXj+3&0HOh`l\|1+::2Y{AZ4\|H4i\|^.ybIDo>@,mE22{6l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49829	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:36 UTC	1248	OUT	GET /assets/fontawesome-webfont-1b6c2768e53b10ea9239f6e9827caf5f217a3a6cdee464151743ffffa7f636b7.woff2 HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://surveynuts.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://surveynuts.com/v/6d64cd21 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc3NjA3OCwiZXZlbnRJZCI6NSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjV9
2024-03-18 16:19:36 UTC	820	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778776&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=jQebO%2FTGm3%2BymxQuwPwLir4p87WAl2Z3GFhnLd207No%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778776&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=jQebO%2FTGm3%2BymxQuwPwLir4p87WAl2Z3GFhnLd207No%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:36 GMT Last-Modified: Wed, 04 Oct 2023 15:27:13 GMT Content-Type: application/font-woff2 Cache-Control: public, max-age=86400, no-transform Content-Length: 77160 Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:36 UTC	2372	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-03-18 16:19:36 UTC	3558	IN	Data Raw: 05 b7 04 70 b0 5e 8f 43 44 78 de c2 78 6a 29 84 35 4f c8 39 fb 0d a1 60 d1 d2 45 44 58 ee 78 f1 8d 20 dd 92 47 55 c8 c0 ed cb af 0e c4 99 aa 04 a9 ef d6 da 89 9c 2e 25 0d b7 bf b6 ce 88 b1 7e 0c e3 f1 fa 3d ff 08 1a 16 43 13 6f a6 29 0d 46 84 37 f3 ca e7 24 5a a4 fd 28 b7 67 c1 eb 6f 42 ad a7 0d db c6 9c c0 40 de e5 26 f2 c3 da 65 ee 7b 06 ea e2 e5 8e a3 a0 08 6c a0 b0 66 8a 5f c6 52 78 99 4e 5b a7 5d 0c ae 9b 07 38 60 2d 33 99 73 b4 a6 c1 92 7b 7f 50 6a 01 de 19 b8 57 75 63 39 ef 85 b8 ae a9 84 1b 5b 3e 1d ea 2d 9f 2e 44 a2 dc 8e 59 fa 1f f7 9b 15 0f 80 1e 64 87 0c cf c2 d8 07 a2 b2 2b 18 5e 7b 93 ae b9 43 ee f7 89 b1 6d e0 c4 d9 f0 2c a6 b1 40 4e 3c b2 90 1d da d9 d0 f8 f2 89 af 1f 7f 0e 2e 8d 94 56 f1 e6 4d f0 da 11 53 ec 2b d3 5c 44 9e 2b a2 da 52 a2 Data Ascii: p^CDxxj)5O9`EDXx GU.%~=Co)F7$Z(goB@&e{lf_RxN[]8`-3s{PjWuc9[>-.DYd+^{Cm,@N<.VMS+\D+R
2024-03-18 16:19:36 UTC	4744	IN	Data Raw: 19 c5 24 ae ee 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 c1 f7 e1 e5 5b e9 16 38 47 1a 86 fe d9 64 74 ac a2 ac a3 b1 7a ec b0 83 d9 a6 06 09 38 b4 b4 42 bd ae 4b 50 22 40 32 65 8c 65 03 e6 94 0b ac 79 e6 1e 78 e7 a7 1e da 6a bd b8 Data Ascii: $+#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp[8Gdtz8BKP"@2eeyxj
2024-03-18 16:19:36 UTC	3310	IN	Data Raw: 11 de d1 aa 0f 07 10 6a bd 34 3d a4 ee fe ba e3 a5 6f 65 55 4b 0b e6 78 64 e9 57 98 eb bb b8 31 6e 44 a5 58 cd f5 98 e5 79 96 22 8d ae e9 35 e5 80 98 c0 ca 82 82 d7 14 95 d5 4b 01 95 ec 17 d1 fb a4 bf 14 2d a4 6f 37 42 22 b4 e0 12 c4 9b 29 1e 98 a5 75 57 0c e2 d1 1f 45 c1 68 39 ac 10 01 c0 62 29 1a 50 e4 25 2e 96 24 84 47 9c c1 28 40 28 16 91 11 f1 75 a3 d6 52 8d 1b ec 66 4c 54 20 06 cf aa 1b 4a 36 0d e9 ce ea 29 0f 48 2a 79 d3 df f1 0b e8 9f 3d ce d2 cc 51 0b 2f ab dd d2 d8 75 49 2e bd 08 ba 3c 8f db ef 90 c1 18 2c 96 b0 72 23 82 79 04 7c be 03 06 6c c9 3c 60 fa c6 51 f9 07 ea 3d c4 fb d4 f9 eb a9 46 24 1b e8 ab d2 41 92 74 e9 98 8d 32 da ec 94 64 36 01 63 cc f3 82 57 c7 a5 e4 87 a3 34 7e f6 25 ef 76 1b 62 19 fc 61 ff d0 95 5f 43 d5 ae e3 59 de 6c 87 cc Data Ascii: j4=oeUKxdW1nDXy"5K-o7B")uWEh9b)P%.$G(@(uRfLT J6)H*y=Q/uI.<,r#y\|l<`Q=F$At2d6cW4~%vba_CYl
2024-03-18 16:19:36 UTC	5792	IN	Data Raw: 52 8c 5b cb dc 9c 64 bc 2a 29 9d c9 a9 bb 9c c0 0c 50 e4 c2 a2 c4 bd 48 74 18 a3 6f fd bc 35 9c f4 38 89 c9 2e 84 c2 5d c0 68 cb 5c 73 e0 d0 86 d8 8b e1 0b da 03 10 e6 d7 3f 18 f5 56 73 f1 d8 e8 68 2d 55 83 27 89 23 45 f6 67 f2 89 ba 6d 5d f4 c4 32 4e 6a 57 6c 19 f6 72 6d a9 5a cd e3 12 97 a3 c3 c3 23 32 e7 f6 42 45 18 37 35 5e 5e 87 a4 03 61 34 07 da 04 c5 77 55 a9 ed 4b cb 27 67 3f 67 65 93 7f c8 df 13 32 31 33 ce e6 e7 b8 cc c7 b8 9b 6f 60 d4 d7 6c 4b 7a 50 36 5e 97 20 88 24 f7 24 39 4e 8a 90 14 8b 57 76 67 32 f9 48 02 cf 8f 93 af e6 43 52 ef df 9c 61 37 46 0e a1 2f e3 b9 f1 33 f1 5c 38 ad fb ad 46 84 5c b9 2f 7a 0c 50 cc ef 2f 3f fd bd ec 1e e8 07 ee a7 e9 f5 7b 78 d6 e3 d3 bc f7 5d af 0f b3 be bb 00 f9 89 eb 17 2f b4 17 5e 39 fa 40 37 63 a3 7f de a5 Data Ascii: R[d*)PHto58.]h\s?Vsh-U'#Egm]2NjWlrmZ#2BE75^^a4wUK'g?ge213o`lKzP6^ $$9NWvg2HCRa7F/3\8F\/zP/?{x]/^9@7c
2024-03-18 16:19:36 UTC	8302	IN	Data Raw: 7e 91 ed 55 ae 32 17 28 27 77 7c d6 2f 9a ab 42 33 14 00 c2 ea b1 d7 e8 e7 4a 08 2c bb 74 0a ea 1e dc f1 ac 57 67 4c 4e 24 f2 20 5b c8 56 e3 fc 0e 7c de be 99 76 c0 68 30 58 9d 58 fe 0c e9 ec 9a cf d0 3c db 6a 8e 68 e7 f9 9c b6 19 89 6a 30 d0 ce 7b 72 4c 4e 6d b3 ad e6 5b 5b 4c 1e f6 33 53 b1 24 59 08 83 11 f7 a5 f1 ca 88 13 7e 0d df 87 a5 7f 92 91 4b 9e b0 ba ad f1 18 dd 21 d5 51 45 28 d8 8b 9a 93 8b c3 d9 50 3a 26 7f 97 f9 7b af c6 bc d3 ac 34 73 c5 93 89 85 57 4c 33 41 8c 36 85 52 0d 11 69 76 2d 15 37 05 53 10 3a 9f 4c b1 33 ad b0 65 06 9a f1 ee b9 3d 5e aa 8b 89 af 19 a2 c5 a6 34 cb b3 bf 34 06 c2 4f 43 df e9 52 7e dc 90 8c 85 4e 4b 30 2b 63 24 26 33 96 4d b1 fc d6 e9 75 3c 3a a5 22 15 5a 93 94 e8 00 2c 9d 8a c7 6e 32 4e 96 c6 d4 ce 45 47 96 10 eb d1 Data Ascii: ~U2('w\|/B3J,tWgLN$ [V\|vh0XX<jhj0{rLNm[[L3S$Y~K!QE(P:&{4sWL3A6Riv-7S:L3e=^44OCR~NK0+c$&3Mu<:"Z,n2NEG
2024-03-18 16:19:37 UTC	9488	IN	Data Raw: b9 f4 14 6c 7a ad 7f 42 80 6c 3f 0b 67 dc f9 b2 01 d4 f7 8a 8b ca 03 cd 47 d6 ee 5a 9b 1a 1a 82 be 30 60 12 b3 07 e5 7e fb dd 07 ea 93 39 a3 3c 21 3a 04 95 88 ce 2b 92 a9 78 db a3 22 22 70 aa 5b 85 57 c5 7d f7 8f 15 22 e2 59 7c ca 92 91 aa 3e f7 2f 69 65 2b 55 b6 72 af 1f 57 97 e9 d1 57 73 36 0a 94 67 ed 2a 9d 44 7d ec 7a 81 79 6e 2b e1 88 85 77 55 d3 8b d6 89 eb cd 66 a9 14 0f 47 bf 03 25 21 a9 bb 88 4c 5b 23 fe 83 22 d1 68 32 99 66 6d 68 ff d2 7c 46 71 62 7d 2a 95 48 88 08 a9 23 7a 9c b4 b1 1f 6e 56 cb b4 80 99 5d f6 78 41 20 98 31 8d ae a2 a5 6d 01 b7 a9 1f 6b b1 0a 09 d7 82 56 12 10 7c 3d 08 c4 40 bb 3d 85 c1 4f 42 07 b0 7a c6 50 bc 64 f3 c0 c9 35 56 72 6c 24 00 bd a1 d1 5a d5 84 38 90 bb 83 b4 38 5e cf 8f 98 71 70 28 3a 41 36 4a 35 50 59 32 09 09 c3 Data Ascii: lzBl?gGZ0`~9<!:+x""p[W}"Y\|>/ie+UrWWs6gD}zyn+wUfG%!L[#"h2fmh\|Fqb}H#znV]xA 1mkV\|=@=OBzPd5Vrl$Z88^qp(:A6J5PY2
2024-03-18 16:19:37 UTC	1034	IN	Data Raw: 74 50 bd 0d f5 af aa 52 a5 5e a9 d7 e5 e5 00 53 bf ef 68 22 91 48 b0 c6 fd 4a 6e 23 5f 70 bf 2e c2 24 ad b2 02 19 8d 73 32 f0 69 a8 f1 fb 42 cc e6 e6 f1 7b 54 d1 75 5a 4b 0b 74 5c d4 4c 1a 49 87 19 25 be ed f1 2a 9a 0b 8c bf 50 f8 3d 16 7b f9 62 e0 22 55 b8 51 87 22 56 d3 52 7d 09 3e 5a 82 d6 f1 8a d2 0c a5 81 c5 8a 4e b1 b3 56 dd ae 02 e9 2d fb 4a c9 ec 68 02 0c cf 83 e1 cd 0d c3 5e a9 d9 d5 c1 0c 11 8c 3b 92 a6 46 51 c3 d4 2c 2a 2b e8 ad 22 f5 22 d5 30 30 29 b6 3a 3b 3a 56 94 a7 12 50 38 2a 65 28 37 d2 4a 6c 97 bd 8e 8b 9b 30 6f 48 65 5e c6 8a e2 e5 79 25 81 60 bc 93 1d 34 a7 c7 59 d2 5b 65 58 16 7d b2 36 4b fc 4a 05 cb a9 84 91 12 cc 00 00 5e 23 3c c9 9d c9 08 cf 49 df 5f 2f ee ae 32 33 2d 40 b1 6c b3 34 96 cb fb 60 ca ec 50 e2 3d 01 e6 4b 26 3d 2e 29 Data Ascii: tPR^Sh"HJn#_p.$s2iB{TuZKt\LI%P={b"UQ"VR}>ZNV-Jh^;FQ,+""00):;:VP8*e(7Jl0oHe^y%`4Y[eX}6KJ^#<I_/23-@l4`P=K&=.)
2024-03-18 16:19:37 UTC	4344	IN	Data Raw: 9e c9 07 91 bb 25 66 22 a5 59 89 16 93 15 8d fb 3e b6 92 d9 d0 a8 47 5d dc 54 7d ea 5f f3 e2 fa 9d c3 ea c8 54 18 c4 2c 61 7f d2 ec df 5e 26 78 d4 a0 ab 91 e7 2c 76 a5 34 98 45 70 57 f0 c2 b6 9f f2 53 84 41 14 fd 4e ef e2 85 ad 08 67 6a de 29 de c9 ec e2 26 aa 8a 64 99 00 0c ba 35 0b b8 34 ad 7f e4 fe 28 da 04 08 e7 e4 24 c1 fd e3 73 44 e2 42 dd a6 78 9d f0 4f 9f 68 11 aa 58 51 9f cc 4c e2 b2 77 98 05 8a 60 ed 1f 71 8e 6e 1d 50 ee 88 73 54 a1 17 73 db d5 27 40 c7 54 7a c0 bd 2c ed 32 1f cc e8 4a b5 2a 6e 6a de 88 fb 34 5f 98 7d 33 b9 b8 17 9d 9c bb d7 99 c7 6a c5 d2 ab 2d ab 25 69 f9 a8 f2 a5 bd e9 0a 80 f2 b7 01 bd c2 50 92 4f f3 a4 46 3f 8f ad 6b 6a 53 db 23 ed 07 04 47 fa 27 eb ca 70 1b f6 31 e6 8e 1d bd 4a c3 18 6d ea 62 06 da f6 cd d5 61 5b ef 32 ef Data Ascii: %f"Y>G]T}_T,a^&x,v4EpWSANgj)&d54($sDBxOhXQLw`qnPsTs'@Tz,2J*nj4_}3j-%iPOF?kjS#G'p1Jmba[2
2024-03-18 16:19:37 UTC	4344	IN	Data Raw: ee 62 e2 8d c7 8e 45 da b0 02 6e bc 2f 84 4d 01 d1 d9 41 85 0e 04 ec 36 ca e2 eb fb b6 93 36 4d 6b 14 3c e9 cc 75 39 8d 6f 35 29 3f 71 a9 09 23 c6 30 31 39 75 a3 41 2e ca 6d 58 02 16 a9 69 c8 aa f2 66 67 c6 51 7f 1a 93 b7 ba 57 6f f1 fe 67 ad 40 c6 eb 18 75 ac 3b c3 09 c9 6f 17 23 08 96 a5 cc f5 26 8f 6f 34 8e 11 4f 91 3a 6f 6e d3 f4 4d 5e a9 9d a2 3b 3e 9e e7 72 82 30 b6 2e 27 9a 7d 17 bc 29 58 f5 e4 0c 22 a2 39 99 ba 4f e7 0c b0 8a 8b 7e a9 2e 37 40 33 bc b4 f2 f1 9a bf 5f 7e 49 2a fa 8f 95 60 fa 85 0e eb d6 a3 c1 b1 12 71 ad 14 c1 ca 5e 0c 51 28 54 86 95 cf 03 d8 04 df a0 31 f7 60 60 06 c2 f3 77 32 8d be de c6 75 ad a4 e0 af d5 93 05 af d7 05 d8 a3 08 cb da c5 30 06 12 8c 46 ef b5 28 7a 63 3c b9 c8 6d 4c a9 68 63 f2 f5 2d 70 13 14 86 3a 92 7c 6d 03 e9 Data Ascii: bEn/MA66Mk<u9o5)?q#019uA.mXifgQWog@u;o#&o4O:onM^;>r0.'})X"9O~.7@3_~I*`q^Q(T1``w2u0F(zc<mLhc-p:\|m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49832	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:36 UTC	1234	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778775593&cv=11&fst=1710778775593&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:37 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:37 UTC	549	IN	Data Raw: 38 64 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8da(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:37 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:37 UTC	472	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 76 25 32 46 36 64 36 34 63 64 32 31 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 4e 25 32 30 2d 25 32 30 53 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21\x26frm\x3d0\x26tiba\x3dSN%20-%20S
2024-03-18 16:19:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49833	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:37 UTC	1358	OUT	GET /td/rul/1047174163?random=1710778775593&cv=11&fst=1710778775593&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:37 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:37 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49835	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:37 UTC	651	OUT	GET /in.php?site_id=100724983&href=%2Fv%2F6d64cd21&title=SN%20-%20Support%20Form&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=4pj578 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:37 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:37 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668b9ed8868cab-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:37 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:19:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49836	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:37 UTC	1255	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778775593&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&frm=0&tiba=SN%20-%20Support%20Form&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2dhrUHT3Z79fts9ZRO-WK0eHhin6w8x_W5ckLtz5hHo0OxZY&random=3008923148&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49837	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:37 UTC	1289	OUT	POST /requests/newUserHC HTTP/1.1 Host: surveynuts.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://surveynuts.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/v/6d64cd21 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc3NjA3OCwiZXZlbnRJZCI6NSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjV9
2024-03-18 16:19:37 UTC	36	OUT	Data Raw: 75 74 6f 6b 65 6e 3d 6b 6e 37 63 35 32 69 6d 6e 37 68 26 76 61 72 31 3d 26 76 61 72 32 3d 26 76 61 72 33 3d Data Ascii: utoken=kn7c52imn7h&var1=&var2=&var3=
2024-03-18 16:19:38 UTC	840	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778777&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=EZ9h36A29bxqWb9uSqStbnQwTZz5pSPNVENG%2FNKDQ%2FM%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778777&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=EZ9h36A29bxqWb9uSqStbnQwTZz5pSPNVENG%2FNKDQ%2FM%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:38 GMT X-Frame-Options: ALLOWALL Content-Type: application/xml Cache-Control: no-cache X-Request-Id: 640e53fe-b323-45b1-866e-c6cf31d884fa X-Runtime: 0.112757 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49838	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:37 UTC	1021	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778775593&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&frm=0&tiba=SN%20-%20Support%20Form&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2dhrUHT3Z79fts9ZRO-WK0eHhin6w8x_W5ckLtz5hHo0OxZY&random=3008923148&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:38 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49839	54.161.241.46	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:38 UTC	957	OUT	GET /requests/newUserHC HTTP/1.1 Host: surveynuts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc3NjA3OCwiZXZlbnRJZCI6NSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjV9
2024-03-18 16:19:38 UTC	821	IN	HTTP/1.1 404 Not Found Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778778&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=JiB0ci2MTSw7JbV%2FHXlMjTS2yFu9WP5QudzrT7nqv00%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778778&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=JiB0ci2MTSw7JbV%2FHXlMjTS2yFu9WP5QudzrT7nqv00%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 838 X-Request-Id: baa13a99-5d77-47b5-886c-20d46e7a4b84 X-Runtime: 0.003679 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:38 UTC	365	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 61 72 67 61 72 69 6e 65 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 32 46 32 46 32 22 3e 0a 20 20 3c 21 2d 2d 20 54 68 69 73 20 66 69 6c 65 20 6c 69 76 65 73 20 Data Ascii: <!DOCTYPE html><html><head><link href='http://fonts.googleapis.com/css?family=Margarine' rel='stylesheet' type='text/css'> <title>The page you were looking for doesn't exist</title></head><body style="background:#F2F2F2"> ... This file lives
2024-03-18 16:19:38 UTC	473	IN	Data Raw: 69 6e 2d 74 6f 70 3a 36 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 72 67 61 72 69 6e 65 27 2c 20 63 75 72 73 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 63 6f 6c 6f 72 3a 67 72 65 79 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 22 3e 0a 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 38 70 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 6f 72 61 6e 67 65 22 3e 4f 68 20 3a 28 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 54 Data Ascii: in-top:60px;padding:10px;margin-left:auto;margin-right:auto;font-family: 'Margarine', cursive;font-size:18pt;font-weight:500;color:grey;text-align:center"><div style="font-size:38pt;font-weight:900;text-align:center;color:orange">Oh :( </div> <div>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49840	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:39 UTC	668	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=c1aey6 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:40 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:40 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668baf9ae94258-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49841	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:40 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=4egsy1 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:40 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:40 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668bb13f380cc2-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49843	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:47 UTC	1293	OUT	GET /en HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc3NjA3OCwiZXZlbnRJZCI6NSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjV9 If-None-Match: W/"b1de89170874dd2cacdce3a755cd1bfb"
2024-03-18 16:19:47 UTC	912	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778787&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=CBKko6z6euQuvf8JQa3t0zCaa3cV62LcP6sO6RqGjr8%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778787&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=CBKko6z6euQuvf8JQa3t0zCaa3cV62LcP6sO6RqGjr8%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:47 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"e38bc732d626fd336fae0b2f5c55f730" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 5ba23101-9734-4894-9bcb-940c874c02f8 X-Runtime: 0.020484 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:47 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 4d 61 6b 65 72 2c 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 51 75 65 73 74 69 6f 6e 6e 61 69 72 65 20 43 72 65 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d Data Ascii: <!DOCTYPE html><html><head><title>Survey Maker, Free Online Questionnaire Creator</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale =
2024-03-18 16:19:47 UTC	3558	IN	Data Raw: 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 31 20 63 68 61 72 61 63 74 65 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 Data Ascii: ngth (should be 1 character)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater
2024-03-18 16:19:47 UTC	4744	IN	Data Raw: 74 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 73 77 65 72 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 Data Ascii: t collecting answers","feat_subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview b
2024-03-18 16:19:47 UTC	2358	IN	Data Raw: 73 74 61 74 69 73 74 69 63 73 22 2c 22 66 65 61 74 31 36 5f 64 65 73 63 22 3a 22 49 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 Data Ascii: statistics","feat16_desc":"In real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview
2024-03-18 16:19:47 UTC	7116	IN	Data Raw: 6f 72 20 65 76 65 6e 20 72 65 2d 6f 70 65 6e 20 69 74 20 6c 61 74 65 72 2e 22 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 Data Ascii: or even re-open it later.","feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We r
2024-03-18 16:19:47 UTC	7364	IN	Data Raw: 65 33 22 3a 22 43 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 73 75 72 76 65 79 73 20 77 69 74 68 20 53 75 72 76 65 79 4e 75 74 73 20 6e 6f 77 2e 22 2c 22 68 6f 6d 65 36 22 3a 22 4f 75 72 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 68 65 6c 70 73 20 63 6f 6d 70 61 6e 69 65 73 20 61 6e 64 20 73 74 75 64 65 6e 74 73 20 63 72 65 61 74 65 20 77 65 62 20 61 6e 64 20 6d 6f 62 69 6c 65 20 73 75 72 76 65 79 73 2c 20 67 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 73 20 61 6e 64 20 61 6e 61 6c 79 7a 65 20 74 68 65 20 72 65 73 75 6c 74 73 2e 20 22 2c 22 68 6f 6d 65 37 22 3a 22 43 72 65 61 74 65 20 73 75 72 76 65 79 73 22 2c 22 62 62 61 72 31 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 75 73 22 2c 22 62 62 61 72 32 22 3a 22 74 65 72 6d 73 20 5c 75 30 30 32 Data Ascii: e3":"Create your own surveys with SurveyNuts now.","home6":"Our survey software helps companies and students create web and mobile surveys, gather responses and analyze the results. ","home7":"Create surveys","bbar1":"Connect with us","bbar2":"terms \u002
2024-03-18 16:19:47 UTC	9488	IN	Data Raw: 20 72 65 73 75 6c 74 73 20 77 69 74 68 20 3a 22 2c 22 72 65 73 75 6c 74 73 5f 70 72 69 76 61 63 79 34 22 3a 22 4f 72 20 79 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 72 65 73 75 6c 74 73 20 70 61 67 65 20 74 6f 20 27 70 75 62 6c 69 63 27 20 62 79 20 64 65 66 61 75 6c 74 2c 20 69 6e 20 77 68 69 63 68 20 63 61 73 65 20 61 6c 6c 20 74 68 65 20 72 65 73 70 6f 6e 64 65 6e 74 73 20 6f 66 20 79 6f 75 72 20 73 75 72 76 65 79 20 77 69 6c 6c 20 62 65 20 69 6e 76 69 74 65 64 20 74 6f 20 73 65 65 20 74 68 65 20 72 65 73 75 6c 74 73 20 72 69 67 68 74 20 61 66 74 65 72 20 74 61 6b 69 6e 67 20 74 68 65 20 73 75 72 76 65 79 20 3a 22 2c 22 72 65 73 75 6c 74 73 5f 70 72 69 76 61 74 65 22 3a 22 53 75 72 76 65 79 20 72 65 73 75 6c 74 73 20 61 72 65 20 70 72 69 76 Data Ascii: results with :","results_privacy4":"Or you can change the results page to 'public' by default, in which case all the respondents of your survey will be invited to see the results right after taking the survey :","results_private":"Survey results are priv
2024-03-18 16:19:47 UTC	4992	IN	Data Raw: 6e 75 70 20 72 65 71 75 69 72 65 64 22 2c 22 63 75 72 72 65 6e 74 5f 74 72 69 61 6c 22 3a 22 59 6f 75 27 72 65 20 63 75 72 72 65 6e 74 6c 79 20 6f 6e 20 61 20 66 72 65 65 20 74 72 69 61 6c 2e 22 2c 22 64 61 79 73 5f 6c 65 66 74 22 3a 22 4e 75 6d 62 65 72 20 6f 66 20 64 61 79 73 20 6c 65 66 74 20 3a 22 2c 22 74 72 69 61 6c 5f 65 78 70 69 72 65 64 22 3a 22 59 6f 75 72 20 66 72 65 65 20 74 72 69 61 6c 20 68 61 73 20 65 78 70 69 72 65 64 2e 22 2c 22 6e 6f 74 69 66 5f 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 6f 72 6d 20 68 61 73 20 72 65 63 65 69 76 65 64 20 6e 65 77 20 72 65 73 70 6f 6e 73 65 73 22 2c 22 6e 6f 74 69 66 5f 75 70 67 72 61 64 65 22 3a 22 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 69 74 20 73 65 65 6d 73 20 6c 69 6b 65 20 79 6f 75 72 20 66 72 Data Ascii: nup required","current_trial":"You're currently on a free trial.","days_left":"Number of days left :","trial_expired":"Your free trial has expired.","notif_title":"Your form has received new responses","notif_upgrade":"Unfortunately, it seems like your fr
2024-03-18 16:19:47 UTC	2896	IN	Data Raw: 73 74 69 6f 6e 6e 61 69 72 65 73 2c 20 67 61 74 68 65 72 20 61 6e 73 77 65 72 73 2c 20 61 6e 64 20 76 69 65 77 20 72 65 73 75 6c 74 73 20 67 72 61 70 68 69 63 61 6c 6c 79 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: stionnaires, gather answers, and view results graphically in real-time."><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="viewport" content="width=device-width, init
2024-03-18 16:19:47 UTC	5792	IN	Data Raw: 46 39 34 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 31 2e 32 72 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 69 6e 73 63 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 31 32 35 25 29 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 0a 3c 64 69 76 20 64 61 74 61 2d 72 6f 6c 65 3d 22 70 61 67 65 22 20 73 74 79 6c 65 3d 22 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 70 78 3b Data Ascii: F94; padding: 0.5rem 1.2rem; color: white; font-family: 'Poppins', sans-serif; font-weight: 600; font-size: 14px; cursor:pointer;}.insc:hover{filter: brightness(125%)}</style><div data-role="page" style="box-sizing:border-box;margin:0px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49849	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:47 UTC	1260	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778786727&cv=11&fst=1710778786727&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:48 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:48 UTC	549	IN	Data Raw: 38 66 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8f4(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:48 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:48 UTC	498	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 75 72 76 65 79 25 32 30 4d 61 6b 65 72 25 32 43 25 32 30 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen\x26frm\x3d0\x26tiba\x3dSurvey%20Maker%2C%20
2024-03-18 16:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49850	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:47 UTC	1384	OUT	GET /td/rul/1047174163?random=1710778786727&cv=11&fst=1710778786727&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:48 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:48 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49851	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:47 UTC	677	OUT	GET /in.php?site_id=100724983&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=7uu186 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:48 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:48 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668be11ab7c41d-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:48 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49848	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:47 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1044 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:47 UTC	1044	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 34 62 65 31 35 62 35 63 61 32 61 30 37 38 38 37 65 38 34 35 61 34 39 33 32 31 34 34 39 30 32 33 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 38 36 36 38 38 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 36 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=4be15b5ca2a07887e845a49321449023&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778786688%2C%22event_id%22%3A6%2C%22session_id%22%3A1710
2024-03-18 16:19:48 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a4-3079271b4f9481952ab3a284 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:48 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49852	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:48 UTC	677	OUT	GET /in.php?site_id=101089440&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=5qo0dc HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:48 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:48 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668be2bf2543e2-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:48 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49853	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:48 UTC	1281	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778786727&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxWd71GLle8PaR9pphaPc_2fOUdoe2uMWnaWr3s0t3jfM6XSK&random=3589012983&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49856	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:48 UTC	1047	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778786727&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxWd71GLle8PaR9pphaPc_2fOUdoe2uMWnaWr3s0t3jfM6XSK&random=3589012983&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49855	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:48 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:49 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:49 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a5-25322a4e046854fd630d1af4 Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:49 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49854	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:48 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1041 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:48 UTC	1041	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 61 36 61 62 36 31 39 66 35 39 32 37 66 64 36 63 62 63 64 36 61 64 38 37 33 61 39 61 32 30 63 31 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 38 36 36 39 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 37 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=a6ab619f5927fd6cbcd6ad873a9a20c1&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778786693%2C%22event_id%22%3A7%2C%22session_id%22%3A1710
2024-03-18 16:19:49 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:49 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a4-4e795c9f6802dbf538e820fd Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:49 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49857	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:50 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:50 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a6-1c930191379521fb4539ef5f Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:50 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49842	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:50 UTC	1302	OUT	GET /en/register HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc4NjY5MywiZXZlbnRJZCI6NywiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjd9 If-None-Match: W/"40780e4664459d108e8a8a069b3a4900"
2024-03-18 16:19:50 UTC	920	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778790&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=%2F%2ByKBGjsvhmup2cOzRNnNAvnsO0KDrKx3pPKP7441Uc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778790&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=%2F%2ByKBGjsvhmup2cOzRNnNAvnsO0KDrKx3pPKP7441Uc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:50 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"ac8319628bdc6b8aaa199fb63546bed8" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 719eaad0-2203-48c0-9541-8a5a98ee7257 X-Runtime: 0.020194 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:50 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 53 69 67 6e 20 75 70 20 74 6f 20 53 75 72 76 65 79 4e 75 74 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 5f 74 65 78 74 20 3d Data Ascii: <!DOCTYPE html><html><head><title>Sign up to SurveyNuts</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale = "en"; var locale_text =
2024-03-18 16:19:50 UTC	3558	IN	Data Raw: 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 25 7b 63 6f 75 6e 74 7d 22 Data Ascii: r)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater than or equal to %{count}"
2024-03-18 16:19:50 UTC	4744	IN	Data Raw: 74 5f 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 65 69 6e 67 20 62 75 69 6c 74 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 20 4d Data Ascii: t_subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview being built in real-time. M
2024-03-18 16:19:51 UTC	2358	IN	Data Raw: 22 49 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 79 6f 75 72 20 72 65 73 75 6c 74 73 20 62 65 66 6f 72 65 20 64 69 Data Ascii: "In real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview of your results before di
2024-03-18 16:19:51 UTC	7116	IN	Data Raw: 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 65 73 70 6f 6e 64 20 74 6f 20 6d 6f 73 74 20 72 65 71 75 65 73 74 73 20 62 79 Data Ascii: ,"feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We respond to most requests by
2024-03-18 16:19:51 UTC	8302	IN	Data Raw: 79 73 20 77 69 74 68 20 53 75 72 76 65 79 4e 75 74 73 20 6e 6f 77 2e 22 2c 22 68 6f 6d 65 36 22 3a 22 4f 75 72 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 68 65 6c 70 73 20 63 6f 6d 70 61 6e 69 65 73 20 61 6e 64 20 73 74 75 64 65 6e 74 73 20 63 72 65 61 74 65 20 77 65 62 20 61 6e 64 20 6d 6f 62 69 6c 65 20 73 75 72 76 65 79 73 2c 20 67 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 73 20 61 6e 64 20 61 6e 61 6c 79 7a 65 20 74 68 65 20 72 65 73 75 6c 74 73 2e 20 22 2c 22 68 6f 6d 65 37 22 3a 22 43 72 65 61 74 65 20 73 75 72 76 65 79 73 22 2c 22 62 62 61 72 31 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 75 73 22 2c 22 62 62 61 72 32 22 3a 22 74 65 72 6d 73 20 5c 75 30 30 32 36 20 63 6f 6e 64 69 74 69 6f 6e 73 22 2c 22 62 62 61 72 33 22 3a 22 53 75 72 Data Ascii: ys with SurveyNuts now.","home6":"Our survey software helps companies and students create web and mobile surveys, gather responses and analyze the results. ","home7":"Create surveys","bbar1":"Connect with us","bbar2":"terms \u0026 conditions","bbar3":"Sur
2024-03-18 16:19:51 UTC	9488	IN	Data Raw: 20 73 68 61 72 65 20 69 74 20 72 69 67 68 74 20 61 66 74 65 72 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 69 72 20 61 6e 73 77 65 72 73 2e 20 57 65 20 77 69 6c 6c 20 61 64 64 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 20 66 6f 72 20 76 61 72 69 6f 75 73 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 6c 61 74 66 6f 72 6d 20 69 6e 76 69 74 69 6e 67 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 73 75 72 76 65 79 20 61 74 20 74 68 65 20 65 6e 64 2e 22 2c 22 6e 6f 5f 73 68 61 72 65 22 3a 22 4e 6f 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 22 2c 22 61 64 64 5f 74 68 65 6d 22 3a 22 41 64 64 20 74 68 65 6d 22 2c 22 73 68 61 72 65 5f 61 63 74 69 76 65 22 3a 22 53 68 61 72 65 20 62 75 74 74 6f Data Ascii: share it right after submitting their answers. We will add share buttons for various social networks and communication platform inviting them to share the survey at the end.","no_share":"No share buttons","add_them":"Add them","share_active":"Share butto
2024-03-18 16:19:51 UTC	4054	IN	Data Raw: 22 69 6d 61 67 65 2f 69 63 6f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 73 6e 75 74 73 5f 66 61 76 69 63 6f 6e 5f 6e 65 77 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 69 63 6f 22 20 2f 3e 0a 0a 0a 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 20 63 6f 6e 74 65 6e 74 3d 22 53 75 72 76 65 79 4e 75 74 73 20 2d 20 53 69 6d 70 6c 65 20 53 75 72 76 65 79 20 53 6f 66 74 77 61 72 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 69 6d 67 75 72 2e 63 6f 6d 2f 51 72 36 4e 69 6f 37 2e 70 6e 67 22 3e 20 0a 3c 6d 65 74 61 20 70 Data Ascii: "image/ico" /><link rel="shortcut icon" href="/snuts_favicon_new.ico" type="image/ico" /><meta property="og:title" content="SurveyNuts - Simple Survey Software" /><meta property="og:image" content="https://i.imgur.com/Qr6Nio7.png"> <meta p
2024-03-18 16:19:51 UTC	11860	IN	Data Raw: 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3b 72 2e 61 73 79 6e 63 3d 74 72 75 65 0a 20 20 3b 72 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 35 2e 32 2e 32 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 Data Ascii: ssOrigin="anonymous";r.async=true ;r.src="https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("scr
2024-03-18 16:19:51 UTC	5344	IN	Data Raw: 6e 2d 77 69 64 74 68 3a 20 36 30 31 70 78 29 20 7b 0a 09 09 20 20 2e 74 6f 70 6c 69 6e 6b 20 7b 0a 09 09 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 20 20 7d 0a 09 09 20 20 2e 68 65 61 64 65 72 70 69 63 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 7d 0a 09 09 20 20 2e 74 6f 70 68 6f 6d 65 6e 61 76 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 0a Data Ascii: n-width: 601px) { .toplink { font-size: 14px; } .headerpic{height:40px;} .tophomenav{width:100%;padding:10px;box-sizing:border-box;border-bottom:1px solid black;background:white;border-bottom:none;height:70px;background:transparent}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49861	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	1363	OUT	GET /td/rul/1047174163?random=1710778790961&cv=11&fst=1710778790961&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49860	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	1239	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778790961&cv=11&fst=1710778790961&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:52 UTC	549	IN	Data Raw: 38 64 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8df(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:52 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:52 UTC	477	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 25 32 46 72 65 67 69 73 74 65 72 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 69 67 6e 25 32 30 75 70 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen%2Fregister\x26frm\x3d0\x26tiba\x3dSign%20up
2024-03-18 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49859	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:52 UTC	1043	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 63 62 34 34 37 64 30 65 33 33 66 39 34 38 36 32 32 30 34 62 37 64 66 32 36 34 63 64 37 64 63 66 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 37 39 30 38 36 31 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 38 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=cb447d0e33f94862204b7df264cd7dcf&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778790861%2C%22event_id%22%3A8%2C%22session_id%22%3A1710
2024-03-18 16:19:52 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a8-46441d4e02a8b1ed1c72c11e Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:52 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49862	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	656	OUT	GET /in.php?site_id=100724983&href=%2Fen%2Fregister&title=Sign%20up%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=fy3qs3 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:52 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:52 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668bfc69c5432c-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:52 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49863	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	656	OUT	GET /in.php?site_id=101089440&href=%2Fen%2Fregister&title=Sign%20up%20to%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=4ely7z HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:52 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:52 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668bfe0ed60f36-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:52 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49864	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	1260	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778790961&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLIQaislnGPkAmumeccYxFjzOfIiMXP7YrjizknZjUt_nyPJe&random=2313438944&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49866	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=cuzy3x HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:53 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:53 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c00ba3b1993-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49867	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=bnduir HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:53 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:53 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c00c9248ca7-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49865	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:52 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:53 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:19:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869a9-50b856842ba920964723815f Strict-Transport-Security: max-age=15768000
2024-03-18 16:19:53 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49868	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:53 UTC	1026	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778790961&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLIQaislnGPkAmumeccYxFjzOfIiMXP7YrjizknZjUt_nyPJe&random=2313438944&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49858	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:54 UTC	1253	OUT	GET /forgot_password HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc5MDg2MSwiZXZlbnRJZCI6OCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjh9
2024-03-18 16:19:54 UTC	916	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778794&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=0mX4PeQtfJQdckftQKCtlp%2B6OJjPAkmsJ7njfVWeCqk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778794&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=0mX4PeQtfJQdckftQKCtlp%2B6OJjPAkmsJ7njfVWeCqk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:54 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"a940a3f0f879ff2657cb604b0c90878c" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: cbffb82d-7b3e-4fad-94c9-b2525dc318ef X-Runtime: 0.017363 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:54 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 5f 74 65 78 74 20 3d 20 22 45 6e 67 6c 69 73 68 22 3b 0a 20 20 6c 6f 63 61 6c 65 5f Data Ascii: <!DOCTYPE html><html><head><title></title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale = "en"; var locale_text = "English"; locale_
2024-03-18 16:19:54 UTC	3558	IN	Data Raw: 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 Data Ascii: rong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater than or equal to %{count}","equal_to":"must be
2024-03-18 16:19:54 UTC	4744	IN	Data Raw: 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 65 69 6e 67 20 62 75 69 6c 74 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 20 4d 6f 73 74 20 6f 66 20 6f 75 72 20 63 6f 6d 70 65 74 69 74 6f 72 Data Ascii: ed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview being built in real-time. Most of our competitor
2024-03-18 16:19:55 UTC	2358	IN	Data Raw: 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 79 6f 75 72 20 72 65 73 75 6c 74 73 20 62 65 66 6f 72 65 20 64 69 67 67 69 6e 67 20 64 65 65 70 65 72 20 66 6f 72 20 64 65 74 61 Data Ascii: n see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview of your results before digging deeper for deta
2024-03-18 16:19:55 UTC	7116	IN	Data Raw: 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 65 73 70 6f 6e 64 20 74 6f 20 6d 6f 73 74 20 72 65 71 75 65 73 74 73 20 62 79 20 65 6d 61 69 6c 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 68 Data Ascii: iltering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We respond to most requests by email within a few h
2024-03-18 16:19:55 UTC	8302	IN	Data Raw: 77 2e 22 2c 22 68 6f 6d 65 36 22 3a 22 4f 75 72 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 68 65 6c 70 73 20 63 6f 6d 70 61 6e 69 65 73 20 61 6e 64 20 73 74 75 64 65 6e 74 73 20 63 72 65 61 74 65 20 77 65 62 20 61 6e 64 20 6d 6f 62 69 6c 65 20 73 75 72 76 65 79 73 2c 20 67 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 73 20 61 6e 64 20 61 6e 61 6c 79 7a 65 20 74 68 65 20 72 65 73 75 6c 74 73 2e 20 22 2c 22 68 6f 6d 65 37 22 3a 22 43 72 65 61 74 65 20 73 75 72 76 65 79 73 22 2c 22 62 62 61 72 31 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 75 73 22 2c 22 62 62 61 72 32 22 3a 22 74 65 72 6d 73 20 5c 75 30 30 32 36 20 63 6f 6e 64 69 74 69 6f 6e 73 22 2c 22 62 62 61 72 33 22 3a 22 53 75 72 76 65 79 20 4d 61 6b 65 72 22 2c 22 62 62 61 72 34 22 3a 22 42 Data Ascii: w.","home6":"Our survey software helps companies and students create web and mobile surveys, gather responses and analyze the results. ","home7":"Create surveys","bbar1":"Connect with us","bbar2":"terms \u0026 conditions","bbar3":"Survey Maker","bbar4":"B
2024-03-18 16:19:55 UTC	6598	IN	Data Raw: 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 69 72 20 61 6e 73 77 65 72 73 2e 20 57 65 20 77 69 6c 6c 20 61 64 64 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 20 66 6f 72 20 76 61 72 69 6f 75 73 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 6c 61 74 66 6f 72 6d 20 69 6e 76 69 74 69 6e 67 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 73 75 72 76 65 79 20 61 74 20 74 68 65 20 65 6e 64 2e 22 2c 22 6e 6f 5f 73 68 61 72 65 22 3a 22 4e 6f 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 22 2c 22 61 64 64 5f 74 68 65 6d 22 3a 22 41 64 64 20 74 68 65 6d 22 2c 22 73 68 61 72 65 5f 61 63 74 69 76 65 22 3a 22 53 68 61 72 65 20 62 75 74 74 6f 6e 73 20 61 72 65 20 61 63 74 69 76 65 22 2c 22 64 69 73 61 62 Data Ascii: submitting their answers. We will add share buttons for various social networks and communication platform inviting them to share the survey at the end.","no_share":"No share buttons","add_them":"Add them","share_active":"Share buttons are active","disab
2024-03-18 16:19:55 UTC	6944	IN	Data Raw: 20 63 61 6e 20 74 65 73 74 20 69 74 20 6f 75 74 20 21 22 2c 22 63 6f 64 65 5f 6c 69 6e 6b 22 3a 22 59 6f 75 72 20 73 75 72 76 65 79 20 69 73 20 6e 6f 77 20 61 6c 73 6f 20 61 63 63 65 73 73 69 62 6c 65 20 61 74 20 74 68 69 73 20 6c 69 6e 6b 20 3a 22 2c 22 7a 61 70 69 65 72 5f 69 6e 74 72 6f 22 3a 22 57 65 20 6f 66 66 65 72 20 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 74 68 72 6f 75 67 68 20 6f 75 72 20 70 61 72 74 6e 65 72 73 68 69 70 20 77 69 74 68 20 5a 61 70 69 65 72 2c 20 61 6c 6c 6f 77 69 6e 67 20 79 6f 75 20 74 6f 20 63 6f 6e 6e 65 63 74 20 79 6f 75 72 20 64 61 74 61 20 63 6f 6c 6c 65 63 74 65 64 20 76 69 61 20 53 75 72 76 65 79 4e 75 74 73 20 74 6f 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 6f 70 75 6c 61 72 20 61 70 70 73 2e 22 2c 22 63 6f 70 79 5f 6c 69 Data Ascii: can test it out !","code_link":"Your survey is now also accessible at this link :","zapier_intro":"We offer integrations through our partnership with Zapier, allowing you to connect your data collected via SurveyNuts to many other popular apps.","copy_li
2024-03-18 16:19:55 UTC	11860	IN	Data Raw: 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6d 70 6c 69 74 75 Data Ascii: b-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no"><script type="text/javascript"> (function(e,t){var n=e.amplitu
2024-03-18 16:19:55 UTC	13046	IN	Data Raw: 6f 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 63 6f 6c 6f 72 3a 23 31 30 31 30 32 30 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 33 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 5f 70 69 63 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 35 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 0a 2e 68 70 5f 68 6f 77 74 6f 5f 69 6d 67 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 35 30 70 78 3b 7d 0a 2e 69 6e 70 75 74 Data Ascii: o2{font-size:30px;font-weight:900;color:#101020;}.hp_howto3{padding-top:20px;}.hp_howto_pic{float:left;height:100%;width:50%;box-sizing:border-box;overflow:hidden;}.hp_howto_img{height:100%;max-width:100%;box-sizing:border-box;max-height:250px;}.input

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49869	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:55 UTC	1230	OUT	GET /assets/application-c1780a0271628269a6e820faac03d562aebaa7432df12838f9dd6c47afcb7eb7.css HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://surveynuts.com/forgot_password Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc5MDg2MSwiZXZlbnRJZCI6OCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjh9
2024-03-18 16:19:55 UTC	812	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778795&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=DV5i1lgcSwuWmUao2yiOI%2FRqlOzhE7NCCYmVJVGAf9Q%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778795&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=DV5i1lgcSwuWmUao2yiOI%2FRqlOzhE7NCCYmVJVGAf9Q%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:55 GMT Last-Modified: Thu, 19 Oct 2023 08:28:10 GMT Content-Type: text/css Cache-Control: public, max-age=86400 Content-Length: 285274 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:55 UTC	2372	IN	Data Raw: 64 69 76 2e 6a 71 63 6c 6f 75 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 20 22 41 72 69 61 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 39 66 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 64 69 76 2e 6a 71 63 6c 6f 75 64 20 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 64 69 76 2e 6a 71 63 6c 6f 75 64 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 64 66 7d 64 69 76 2e 6a 71 63 6c 6f 75 64 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 63 66 7d 64 69 76 2e 6a 71 63 6c 6f 75 64 20 73 70 61 6e 7b 70 61 64 64 69 6e 67 Data Ascii: div.jqcloud{font-family:"Helvetica", "Arial", sans-serif;color:#09f;overflow:hidden;position:relative}div.jqcloud a{color:inherit;font-size:inherit;text-decoration:none}div.jqcloud a:hover{color:#0df}div.jqcloud a:hover{color:#0cf}div.jqcloud span{padding
2024-03-18 16:19:55 UTC	3558	IN	Data Raw: 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6f 70 74 69 6f 6e 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 7b 6c 65 66 74 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 6f 70 65 6e 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 2d 2d 61 62 6f 76 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 Data Ascii: elect:none}.select2-results__option[aria-selected]{cursor:pointer}.select2-container--open .select2-dropdown{left:0}.select2-container--open .select2-dropdown--above{border-bottom:none;border-bottom-left-radius:0;border-bottom-right-radius:0}.select2-cont
2024-03-18 16:19:55 UTC	4744	IN	Data Raw: 6d 6f 76 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 68 6f 69 63 65 5f 5f 72 65 6d 6f 76 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d Data Ascii: move{color:#999;cursor:pointer;display:inline-block;font-weight:bold;margin-right:2px}.select2-container--default .select2-selection--multiple .select2-selection__choice__remove:hover{color:#333}.select2-container--default[dir="rtl"] .select2-selection--m
2024-03-18 16:19:55 UTC	3310	IN	Data Raw: 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 65 65 20 35 30 25 2c 20 23 63 63 63 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 43 43 43 43 43 Data Ascii: %);background-image:-o-linear-gradient(top, #eee 50%, #ccc 100%);background-image:linear-gradient(to bottom, #eee 50%, #ccc 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFEEEEEE', endColorstr='#FFCCCCC
2024-03-18 16:19:55 UTC	2400	IN	Data Raw: 73 69 63 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 68 6f 69 63 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 68 6f 69 63 65 5f 5f 72 65 6d 6f 76 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e Data Ascii: sic[dir="rtl"] .select2-selection--multiple .select2-selection__choice{float:right;margin-left:5px;margin-right:auto}.select2-container--classic[dir="rtl"] .select2-selection--multiple .select2-selection__choice__remove{margin-left:2px;margin-right:auto}.
2024-03-18 16:19:55 UTC	1448	IN	Data Raw: 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 61 73 63 5f 64 69 73 61 62 6c 65 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 64 65 73 63 5f 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 72 69 67 68 74 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 61 73 73 65 74 73 2f 64 61 74 61 54 61 62 6c 65 73 2f 73 6f 72 74 5f 62 6f 74 68 2d 64 35 37 32 39 64 39 62 37 63 30 62 63 36 39 34 37 61 61 37 30 36 32 66 66 Data Ascii: able.dataTable thead .sorting_asc_disabled,table.dataTable thead .sorting_desc_disabled{background-repeat:no-repeat;background-position:center right}table.dataTable thead .sorting{background-image:url(/assets/dataTables/sort_both-d5729d9b7c0bc6947aa7062ff
2024-03-18 16:19:55 UTC	9488	IN	Data Raw: 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 68 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 72 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 Data Ascii: ble.dataTable.display tbody tr:first-child td{border-top:none}table.dataTable.cell-border tbody th,table.dataTable.cell-border tbody td{border-top:1px solid #ddd;border-right:1px solid #ddd}table.dataTable.cell-border tbody tr th:first-child,table.dataTab
2024-03-18 16:19:55 UTC	6896	IN	Data Raw: 72 2d 73 74 6f 70 28 30 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 32 35 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 39 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 37 35 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 39 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 20 30 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 39 29 20 32 35 25 2c 20 72 67 62 61 28 32 35 35 2c 32 35 Data Ascii: r-stop(0%, rgba(255,255,255,0)), color-stop(25%, rgba(255,255,255,0.9)), color-stop(75%, rgba(255,255,255,0.9)), color-stop(100%, rgba(255,255,255,0)));background:-webkit-linear-gradient(left, rgba(255,255,255,0) 0%, rgba(255,255,255,0.9) 25%, rgba(255,25
2024-03-18 16:19:55 UTC	11860	IN	Data Raw: 20 74 72 2e 44 54 54 54 5f 73 65 6c 65 63 74 65 64 2e 65 76 65 6e 20 74 64 2e 73 6f 72 74 69 6e 67 5f 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 42 30 42 45 44 39 7d 64 69 76 2e 44 54 54 54 5f 63 6f 6c 6c 65 63 74 69 6f 6e 7b 77 69 64 74 68 3a 31 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 38 70 78 20 34 70 78 20 38 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 33 66 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 33 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 Data Ascii: tr.DTTT_selected.even td.sorting_3{background-color:#B0BED9}div.DTTT_collection{width:150px;padding:8px 8px 4px 8px;border:1px solid #ccc;border:1px solid rgba(0,0,0,0.4);background-color:#f3f3f3;background-color:rgba(255,255,255,0.3);overflow:hidden;z-i
2024-03-18 16:19:55 UTC	676	IN	Data Raw: 65 20 2e 73 63 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 68 65 69 67 68 74 3a 35 37 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 33 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 6c 65 66 74 3a 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 3a 2f 2f 61 32 2e 6d 7a 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 2f 72 33 30 2f 50 75 72 70 6c 65 2f 76 34 2f 64 66 2f 65 35 2f Data Ascii: e .screen:before{content:'';display:block;text-indent:-9999px;height:570px;display:inline-block;text-align:left;width:320px;position:absolute;top:0%;margin-top:0px;left:0%;margin-left:0px;background-image:url(http://a2.mzstatic.com/eu/r30/Purple/v4/df/e5/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49847	54.231.230.225	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:55 UTC	594	OUT	GET /img/phgrey.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:55 UTC	412	IN	HTTP/1.1 200 OK x-amz-id-2: 5VNIfLKRLtKA15u8eNph7Myt58NxVFpN+YTq8fg3oQ5bsOyIdwqfv8xlFwk4EIPx6+2S0RGdFok= x-amz-request-id: HK6X28WVC0JPHPFP Date: Mon, 18 Mar 2024 16:19:56 GMT Last-Modified: Mon, 27 Mar 2023 15:18:32 GMT ETag: "c7c8d39f17e2a712e17248f5d3cbab02" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 80 Connection: close
2024-03-18 16:19:55 UTC	80	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 17 49 44 41 54 78 01 63 98 3a 7d da e4 a9 53 18 26 4d 9d 3c 75 da 54 00 30 e1 06 f9 6f 41 01 04 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDATxc:}S&M<uT0oAIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49870	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:55 UTC	1215	OUT	GET /assets/application-cfea3ad101535fe7f99c572035edbc2dabcf80d043e78c0d9719e3e655a37c42.js HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/forgot_password Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc5MDg2MSwiZXZlbnRJZCI6OCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjh9
2024-03-18 16:19:55 UTC	827	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778795&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=DV5i1lgcSwuWmUao2yiOI%2FRqlOzhE7NCCYmVJVGAf9Q%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778795&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=DV5i1lgcSwuWmUao2yiOI%2FRqlOzhE7NCCYmVJVGAf9Q%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:19:55 GMT Last-Modified: Wed, 04 Oct 2023 15:27:12 GMT Content-Type: application/javascript Cache-Control: public, max-age=86400 Content-Length: 2544871 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:19:55 UTC	2372	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-03-18 16:19:55 UTC	3558	IN	Data Raw: 7b 0a 0a 09 2f 2f 20 54 68 65 20 63 75 72 72 65 6e 74 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 20 62 65 69 6e 67 20 75 73 65 64 0a 09 6a 71 75 65 72 79 3a 20 76 65 72 73 69 6f 6e 2c 0a 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 3a 20 6a 51 75 65 72 79 2c 0a 0a 09 2f 2f 20 53 74 61 72 74 20 77 69 74 68 20 61 6e 20 65 6d 70 74 79 20 73 65 6c 65 63 74 6f 72 0a 09 73 65 6c 65 63 74 6f 72 3a 20 22 22 2c 0a 0a 09 2f 2f 20 54 68 65 20 64 65 66 61 75 6c 74 20 6c 65 6e 67 74 68 20 6f 66 20 61 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 30 0a 09 6c 65 6e 67 74 68 3a 20 30 2c 0a 0a 09 74 6f 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 7d 2c 0a Data Ascii: {// The current version of jQuery being usedjquery: version,constructor: jQuery,// Start with an empty selectorselector: "",// The default length of a jQuery object is 0length: 0,toArray: function() {return slice.call( this );},
2024-03-18 16:19:55 UTC	4744	IN	Data Raw: 72 65 70 6c 61 63 65 28 20 2f 5c 44 2f 67 2c 20 22 22 20 29 2c 0a 0a 09 2f 2f 20 41 73 73 75 6d 65 20 6a 51 75 65 72 79 20 69 73 20 72 65 61 64 79 20 77 69 74 68 6f 75 74 20 74 68 65 20 72 65 61 64 79 20 6d 6f 64 75 6c 65 0a 09 69 73 52 65 61 64 79 3a 20 74 72 75 65 2c 0a 0a 09 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6d 73 67 20 29 20 7b 0a 09 09 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 20 6d 73 67 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 7d 2c 0a 0a 09 2f 2f 20 53 65 65 20 74 65 73 74 2f 75 6e 69 74 2f 63 6f 72 65 2e 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 20 63 6f 6e 63 65 72 6e 69 6e 67 20 69 73 46 75 6e 63 74 69 6f 6e 2e 0a 09 2f 2f 20 53 69 6e 63 65 20 76 65 72 73 69 6f 6e 20 31 2e 33 2c Data Ascii: replace( /\D/g, "" ),// Assume jQuery is ready without the ready moduleisReady: true,error: function( msg ) {throw new Error( msg );},noop: function() {},// See test/unit/core.js for details concerning isFunction.// Since version 1.3,
2024-03-18 16:19:55 UTC	3310	IN	Data Raw: 65 4c 69 73 74 73 29 0a 09 09 69 66 20 28 20 6c 65 6e 20 21 3d 3d 20 6c 65 6e 20 29 20 7b 0a 09 09 09 77 68 69 6c 65 20 28 20 73 65 63 6f 6e 64 5b 20 6a 20 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 66 69 72 73 74 5b 20 69 2b 2b 20 5d 20 3d 20 73 65 63 6f 6e 64 5b 20 6a 2b 2b 20 5d 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 66 69 72 73 74 2e 6c 65 6e 67 74 68 20 3d 20 69 3b 0a 0a 09 09 72 65 74 75 72 6e 20 66 69 72 73 74 3b 0a 09 7d 2c 0a 0a 09 67 72 65 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 69 6e 76 65 72 74 20 29 20 7b 0a 09 09 76 61 72 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 2c 0a 09 09 09 6d 61 74 63 68 65 73 20 3d 20 5b 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 Data Ascii: eLists)if ( len !== len ) {while ( second[ j ] !== undefined ) {first[ i++ ] = second[ j++ ];}}first.length = i;return first;},grep: function( elems, callback, invert ) {var callbackInverse,matches = [],i = 0,
2024-03-18 16:19:55 UTC	2400	IN	Data Raw: 6e 75 6d 62 65 72 22 20 26 26 20 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 28 20 6c 65 6e 67 74 68 20 2d 20 31 20 29 20 69 6e 20 6f 62 6a 3b 0a 7d 0a 76 61 72 20 53 69 7a 7a 6c 65 20 3d 0a 2f 2a 21 0a 20 2a 20 53 69 7a 7a 6c 65 20 43 53 53 20 53 65 6c 65 63 74 6f 72 20 45 6e 67 69 6e 65 20 76 32 2e 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: number" && length > 0 && ( length - 1 ) in obj;}var Sizzle =/! Sizzle CSS Selector Engine v2.2.1 * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-03-18 16:19:55 UTC	4344	IN	Data Raw: 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 20 2b 20 61 74 74 72 69 62 75 74 65 73 20 2b 20 22 29 2a 29 7c 22 20 2b 0a 09 09 2f 2f 20 33 2e 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 28 63 61 70 74 75 72 65 20 32 29 0a 09 09 22 2e 2a 22 20 2b 0a 09 09 22 29 5c 5c 29 7c 29 22 2c 0a 0a 09 2f 2f 20 4c 65 61 64 69 6e 67 20 61 6e 64 20 6e 6f 6e 2d 65 73 63 61 70 65 64 20 74 72 61 69 6c 69 6e 67 20 77 68 69 74 65 73 70 61 63 65 2c 20 63 61 70 74 75 72 69 6e 67 20 73 6f 6d 65 20 6e 6f 6e 2d 77 68 69 74 65 73 70 61 63 65 20 63 68 61 72 61 63 74 65 72 73 20 70 72 65 63 65 64 69 6e 67 20 74 68 65 20 6c 61 74 74 65 72 0a 09 72 77 68 69 74 65 73 70 61 63 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2b 22 2c 20 22 67 22 20 29 2c 0a Data Ascii: \$)[\\]]\|" + attributes + "))\|" +// 3. anything else (capture 2)"." +")\$\|)",// Leading and non-escaped trailing whitespace, capturing some non-whitespace characters preceding the latterrwhitespace = new RegExp( whitespace + "+", "g" ),
2024-03-18 16:19:55 UTC	6744	IN	Data Raw: 65 6c 65 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 6d 20 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 2c 20 4f 70 65 72 61 2c 20 57 65 62 6b 69 74 0a 09 09 09 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 69 64 65 6e 74 69 66 79 20 76 65 72 73 69 6f 6e 73 0a 09 09 09 09 09 09 09 2f 2f 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 20 63 61 6e 20 6d 61 74 63 68 20 65 6c 65 6d 65 6e 74 73 20 62 79 20 6e 61 6d 65 20 69 6e 73 74 65 61 64 20 6f 66 20 49 44 0a 09 09 09 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 69 64 20 3d 3d 3d 20 6d 20 29 20 7b 0a 09 09 09 09 09 09 09 09 72 65 73 75 6c 74 73 2e 70 75 73 68 28 20 65 6c 65 6d 20 29 3b 0a 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 72 65 Data Ascii: elem = context.getElementById( m )) ) {// Support: IE, Opera, Webkit// TODO: identify versions// getElementById can match elements by name instead of IDif ( elem.id === m ) {results.push( elem );return re
2024-03-18 16:19:55 UTC	5296	IN	Data Raw: 65 6d 65 6e 74 20 6f 72 20 64 6f 63 75 6d 65 6e 74 20 6f 62 6a 65 63 74 20 74 6f 20 75 73 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 52 65 74 75 72 6e 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 0a 20 2a 2f 0a 73 65 74 44 6f 63 75 6d 65 6e 74 20 3d 20 53 69 7a 7a 6c 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 6f 64 65 20 29 20 7b 0a 09 76 61 72 20 68 61 73 43 6f 6d 70 61 72 65 2c 20 70 61 72 65 6e 74 2c 0a 09 09 64 6f 63 20 3d 20 6e 6f 64 65 20 3f 20 6e 6f 64 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 6e 6f 64 65 20 3a 20 70 72 65 66 65 72 72 65 64 44 6f 63 3b 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 Data Ascii: ement or document object to use to set the document * @returns {Object} Returns the current document */setDocument = Sizzle.setDocument = function( node ) {var hasCompare, parent,doc = node ? node.ownerDocument \|\| node : preferredDoc;// Return
2024-03-18 16:19:55 UTC	11088	IN	Data Raw: 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 20 22 5b 2a 5e 24 5d 3d 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 0a 09 09 09 2f 2f 20 42 6f 6f 6c 65 61 6e 20 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 22 76 61 6c 75 65 22 20 61 72 65 20 6e 6f 74 20 74 72 65 61 74 65 64 20 63 6f 72 72 65 63 74 6c 79 0a 09 09 09 69 66 20 28 20 21 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 62 75 67 67 Data Ascii: orAll("[msallowcapture^='']").length ) {rbuggyQSA.push( "[^$]=" + whitespace + "(?:''\|\"\")" );}// Support: IE8// Boolean attributes and "value" are not treated correctlyif ( !div.querySelectorAll("[selected]").length ) {rbugg
2024-03-18 16:19:55 UTC	2896	IN	Data Raw: 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 41 63 63 65 70 74 20 71 75 6f 74 65 64 20 61 72 67 75 6d 65 6e 74 73 20 61 73 2d 69 73 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 33 5d 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 5b 32 5d 20 3d 20 6d 61 74 63 68 5b 34 5d 20 7c 7c 20 6d 61 74 63 68 5b 35 5d 20 7c 7c 20 22 22 3b 0a 0a 09 09 09 2f 2f 20 53 74 72 69 70 20 65 78 63 65 73 73 20 63 68 61 72 61 63 74 65 72 73 20 66 72 6f 6d 20 75 6e 71 75 6f 74 65 64 20 61 72 67 75 6d 65 6e 74 73 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 75 6e 71 75 6f 74 65 64 20 26 26 20 72 70 73 65 75 64 6f 2e 74 65 73 74 28 20 75 6e 71 75 6f 74 65 64 20 29 20 26 26 0a 09 09 09 09 2f 2f 20 47 65 74 20 65 78 63 65 73 Data Ascii: ) ) {return null;}// Accept quoted arguments as-isif ( match[3] ) {match[2] = match[4] \|\| match[5] \|\| "";// Strip excess characters from unquoted arguments} else if ( unquoted && rpseudo.test( unquoted ) &&// Get exces

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49871	54.231.202.161	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:55 UTC	360	OUT	GET /img/phgrey.png HTTP/1.1 Host: snuts.s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:55 UTC	412	IN	HTTP/1.1 200 OK x-amz-id-2: 0tFbwxqX3oLr7ni1VQmtAk1tDsrkQoYCBu+VTp7F4/cDOHuX3zHGUyWejXvcirOr5Wm0FE3P6IQ= x-amz-request-id: HK6JYPNY1JWNYGR1 Date: Mon, 18 Mar 2024 16:19:56 GMT Last-Modified: Mon, 27 Mar 2023 15:18:32 GMT ETag: "c7c8d39f17e2a712e17248f5d3cbab02" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 80 Connection: close
2024-03-18 16:19:55 UTC	80	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 17 49 44 41 54 78 01 63 98 3a 7d da e4 a9 53 18 26 4d 9d 3c 75 da 54 00 30 e1 06 f9 6f 41 01 04 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDATxc:}S&M<uT0oAIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49873	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:57 UTC	1208	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778796752&cv=11&fst=1710778796752&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&hn=www.googleadservices.com&frm=0&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:58 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:58 UTC	549	IN	Data Raw: 38 62 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8ba(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:19:58 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:19:58 UTC	440	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 66 6f 72 67 6f 74 5f 70 61 73 73 77 6f 72 64 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 64 61 74 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fforgot_password\x26frm\x3d0\x26npa\x3d0\x26dat
2024-03-18 16:19:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49874	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:57 UTC	1332	OUT	GET /td/rul/1047174163?random=1710778796752&cv=11&fst=1710778796752&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&hn=www.googleadservices.com&frm=0&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:19:58 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:19:58 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:19:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49875	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:57 UTC	631	OUT	GET /in.php?site_id=100724983&href=%2Fforgot_password&title=&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=3o2mbu HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:58 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:58 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c2018000fab-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:58 UTC	168	IN	Data Raw: 61 32 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 79 65 73 27 3b 0a 7d 0a 0d 0a Data Ascii: a2if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='yes';}
2024-03-18 16:19:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49876	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:57 UTC	631	OUT	GET /in.php?site_id=101089440&href=%2Fforgot_password&title=&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=dospcy HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:58 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:58 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c202fb841af-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:58 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:19:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49877	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:58 UTC	668	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=f92vv8 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:59 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:59 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c265e78c331-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49879	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:59 UTC	1229	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778796752&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&frm=0&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq28uWVKVtvNsR5A-nnSrKjPFh6MO1FGyLAiN1NueiErF2zcBC&random=2516452642&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49878	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:59 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=40au7m HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:19:59 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:19:59 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c27fc5843ac-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:19:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49880	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:19:59 UTC	995	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778796752&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fforgot_password&frm=0&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq28uWVKVtvNsR5A-nnSrKjPFh6MO1FGyLAiN1NueiErF2zcBC&random=2516452642&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:19:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:19:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:19:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49882	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:01 UTC	1299	OUT	GET /en/blogs HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODc5NjgxMiwiZXZlbnRJZCI6OCwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjh9 If-None-Match: W/"3a5c03fb10ff371b0e837e6f0abd5b93"
2024-03-18 16:20:01 UTC	916	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778801&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=A5izXyk0ErFMRdYF0n6gujA4DJmgnv12HsZ%2Bm3FW0DU%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778801&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=A5izXyk0ErFMRdYF0n6gujA4DJmgnv12HsZ%2Bm3FW0DU%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:20:01 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"d279e07722e57729da5e162d02363e00" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: c03058fc-dea0-450a-a55c-86a4e02e1f42 X-Runtime: 0.027880 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:20:01 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 42 6c 6f 67 20 61 62 6f 75 74 20 73 75 72 76 65 79 73 2c 20 6f 70 69 6e 69 6f 6e 20 70 6f 6c 6c 73 20 61 6e 64 20 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 73 20 7c 20 53 75 72 76 65 79 4e 75 74 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 Data Ascii: <!DOCTYPE html><html><head><title>Blog about surveys, opinion polls and questionnaires \| SurveyNuts</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale
2024-03-18 16:20:01 UTC	3558	IN	Data Raw: 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 31 20 63 68 61 72 61 63 74 65 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 Data Ascii: ":"is the wrong length (should be 1 character)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to"
2024-03-18 16:20:01 UTC	4744	IN	Data Raw: 67 20 74 6f 75 63 68 65 73 20 61 6e 64 20 73 74 61 72 74 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 73 77 65 72 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 Data Ascii: g touches and start collecting answers","feat_subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while
2024-03-18 16:20:01 UTC	2358	IN	Data Raw: 22 52 65 70 6f 72 74 69 6e 67 20 5c 75 30 30 32 36 20 73 74 61 74 69 73 74 69 63 73 22 2c 22 66 65 61 74 31 36 5f 64 65 73 63 22 3a 22 49 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 Data Ascii: "Reporting \u0026 statistics","feat16_desc":"In real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you ca
2024-03-18 16:20:01 UTC	7116	IN	Data Raw: 73 77 65 72 73 20 61 74 20 61 6e 79 74 69 6d 65 2c 20 6f 72 20 65 76 65 6e 20 72 65 2d 6f 70 65 6e 20 69 74 20 6c 61 74 65 72 2e 22 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 Data Ascii: swers at anytime, or even re-open it later.","feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","
2024-03-18 16:20:01 UTC	8302	IN	Data Raw: 65 20 72 65 73 75 6c 74 73 22 2c 22 65 6e 64 74 61 6b 65 33 22 3a 22 43 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 73 75 72 76 65 79 73 20 77 69 74 68 20 53 75 72 76 65 79 4e 75 74 73 20 6e 6f 77 2e 22 2c 22 68 6f 6d 65 36 22 3a 22 4f 75 72 20 73 75 72 76 65 79 20 73 6f 66 74 77 61 72 65 20 68 65 6c 70 73 20 63 6f 6d 70 61 6e 69 65 73 20 61 6e 64 20 73 74 75 64 65 6e 74 73 20 63 72 65 61 74 65 20 77 65 62 20 61 6e 64 20 6d 6f 62 69 6c 65 20 73 75 72 76 65 79 73 2c 20 67 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 73 20 61 6e 64 20 61 6e 61 6c 79 7a 65 20 74 68 65 20 72 65 73 75 6c 74 73 2e 20 22 2c 22 68 6f 6d 65 37 22 3a 22 43 72 65 61 74 65 20 73 75 72 76 65 79 73 22 2c 22 62 62 61 72 31 22 3a 22 43 6f 6e 6e 65 63 74 20 77 69 74 68 20 75 73 22 2c 22 62 Data Ascii: e results","endtake3":"Create your own surveys with SurveyNuts now.","home6":"Our survey software helps companies and students create web and mobile surveys, gather responses and analyze the results. ","home7":"Create surveys","bbar1":"Connect with us","b
2024-03-18 16:20:01 UTC	6598	IN	Data Raw: 6d 61 6b 65 20 74 68 65 20 74 61 73 6b 20 65 61 73 69 65 72 20 66 6f 72 20 79 6f 75 72 20 72 65 73 70 6f 6e 64 65 6e 74 73 20 74 6f 20 73 68 61 72 65 20 69 74 20 72 69 67 68 74 20 61 66 74 65 72 20 73 75 62 6d 69 74 74 69 6e 67 20 74 68 65 69 72 20 61 6e 73 77 65 72 73 2e 20 57 65 20 77 69 6c 6c 20 61 64 64 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 20 66 6f 72 20 76 61 72 69 6f 75 73 20 73 6f 63 69 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 6c 61 74 66 6f 72 6d 20 69 6e 76 69 74 69 6e 67 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 73 75 72 76 65 79 20 61 74 20 74 68 65 20 65 6e 64 2e 22 2c 22 6e 6f 5f 73 68 61 72 65 22 3a 22 4e 6f 20 73 68 61 72 65 20 62 75 74 74 6f 6e 73 22 2c 22 61 64 64 5f Data Ascii: make the task easier for your respondents to share it right after submitting their answers. We will add share buttons for various social networks and communication platform inviting them to share the survey at the end.","no_share":"No share buttons","add_
2024-03-18 16:20:01 UTC	6944	IN	Data Raw: 6e 6e 61 69 72 65 2c 20 61 6e 64 20 74 68 65 20 51 75 69 7a 7a 20 73 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 61 20 77 65 65 6b 20 73 6f 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 69 74 20 6f 75 74 20 21 22 2c 22 63 6f 64 65 5f 6c 69 6e 6b 22 3a 22 59 6f 75 72 20 73 75 72 76 65 79 20 69 73 20 6e 6f 77 20 61 6c 73 6f 20 61 63 63 65 73 73 69 62 6c 65 20 61 74 20 74 68 69 73 20 6c 69 6e 6b 20 3a 22 2c 22 7a 61 70 69 65 72 5f 69 6e 74 72 6f 22 3a 22 57 65 20 6f 66 66 65 72 20 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 74 68 72 6f 75 67 68 20 6f 75 72 20 70 61 72 74 6e 65 72 73 68 69 70 20 77 69 74 68 20 5a 61 70 69 65 72 2c 20 61 6c 6c 6f 77 69 6e 67 20 79 6f 75 20 74 6f 20 63 6f 6e 6e 65 63 74 20 79 6f 75 72 20 64 61 Data Ascii: nnaire, and the Quizz section will be available for a week so you can test it out !","code_link":"Your survey is now also accessible at this link :","zapier_intro":"We offer integrations through our partnership with Zapier, allowing you to connect your da
2024-03-18 16:20:01 UTC	11860	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 35 2e 32 2e 32 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 20 3b Data Ascii: "https://cdn.amplitude.com/libs/amplitude-5.2.2-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i) ;
2024-03-18 16:20:01 UTC	10156	IN	Data Raw: 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 09 20 20 7d 0a 09 09 20 20 2e 68 65 61 64 65 72 70 69 63 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 7d 0a 09 09 20 20 2e 74 6f 70 68 6f 6d 65 6e 61 76 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 0a 09 09 20 20 2e 6c 6f 67 6f 6e 61 76 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 74 65 78 74 2d 61 6c Data Ascii: -size: 14px; } .headerpic{height:40px;} .tophomenav{width:100%;padding:10px;box-sizing:border-box;border-bottom:1px solid black;background:white;border-bottom:none;height:70px;background:transparent} .logonav{float:left;padding:5px;text-al

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49884	44.237.140.36	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1048 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:02 UTC	1048	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 64 63 37 38 31 38 38 37 61 31 33 32 65 30 39 34 39 65 32 38 30 61 31 31 32 33 64 64 61 63 34 37 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 38 30 31 31 31 30 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 39 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 30 Data Ascii: checksum=dc781887a132e0949e280a1123ddac47&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778801110%2C%22event_id%22%3A9%2C%22session_id%22%3A1710
2024-03-18 16:20:02 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869b2-6b1995ef5b86943238fa89af Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:02 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49886	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	1418	OUT	GET /td/rul/1047174163?random=1710778801275&cv=11&fst=1710778801275&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:02 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:02 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:20:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49887	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	711	OUT	GET /in.php?site_id=100724983&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=c8icu1 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:02 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:02 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c3c7f4a2365-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:02 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:20:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49888	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	711	OUT	GET /in.php?site_id=101089440&href=%2Fen%2Fblogs&title=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=6gx6te HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:03 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:03 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c3e2cd5c434-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:03 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49889	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=3xnqq9 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:03 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:03 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c3f4cb341ed-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49890	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:02 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=9z6e5t HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:03 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:03 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c3f586f0f45-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49891	44.238.198.87	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:03 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:03 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:20:03 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869b3-5992c4f86fe6f2114ea0b5a6 Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:03 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49885	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:03 UTC	1294	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778801275&cv=11&fst=1710778801275&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&hn=www.googleadservices.com&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:03 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:03 UTC	549	IN	Data Raw: 39 31 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 916(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:20:03 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:20:03 UTC	532	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 25 32 46 62 6c 6f 67 73 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 42 6c 6f 67 25 32 30 61 62 6f 75 74 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs\x26frm\x3d0\x26tiba\x3dBlog%20about
2024-03-18 16:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49892	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:04 UTC	1315	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778801275&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqAMT_bA3oOkM3GwCxnzA2SfusC6yRHb8ZfkwkUt24RgFkpYEy&random=4272873945&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:04 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49894	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:04 UTC	1081	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778801275&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fblogs&frm=0&tiba=Blog%20about%20surveys%2C%20opinion%20polls%20and%20questionnaires%20%7C%20SurveyNuts&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqAMT_bA3oOkM3GwCxnzA2SfusC6yRHb8ZfkwkUt24RgFkpYEy&random=4272873945&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49883	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:07 UTC	1301	OUT	GET /v/6d64cd21 HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODgwMTExMCwiZXZlbnRJZCI6OSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjl9 If-None-Match: W/"53bf74311578b068eeea8d9daccbbfcf"
2024-03-18 16:20:07 UTC	896	IN	HTTP/1.1 304 Not Modified Server: Cowboy Content-Length: 0 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778807&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=K%2FduoqvpYdzY9uB6cmwylDXtoBu6s8vZwUVYVb1NBrM%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778807&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=K%2FduoqvpYdzY9uB6cmwylDXtoBu6s8vZwUVYVb1NBrM%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:20:07 GMT X-Frame-Options: ALLOWALL Etag: W/"53bf74311578b068eeea8d9daccbbfcf" Cache-Control: max-age=0, private, must-revalidate, no-transform X-Request-Id: dc76c811-ca02-470d-972b-ad7e8030372e X-Runtime: 0.039865 Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49898	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=9h1m80 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:08 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:08 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c5fb8268c48-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49896	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	1234	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778807071&cv=11&fst=1710778807071&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:08 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:08 UTC	549	IN	Data Raw: 38 64 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8da(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:20:08 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:20:08 UTC	472	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 76 25 32 46 36 64 36 34 63 64 32 31 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 4e 25 32 30 2d 25 32 30 53 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21\x26frm\x3d0\x26tiba\x3dSN%20-%20S
2024-03-18 16:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49897	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	1358	OUT	GET /td/rul/1047174163?random=1710778807071&cv=11&fst=1710778807071&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&hn=www.googleadservices.com&frm=0&tiba=SN%20-%20Support%20Form&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:08 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:08 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49900	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	1255	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778807071&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&frm=0&tiba=SN%20-%20Support%20Form&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqN2TXUry7TwIywTAL-f7MgewzM30aI29LJDSLvNNHP15OBYra&random=3782280675&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49899	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	651	OUT	GET /in.php?site_id=100724983&href=%2Fv%2F6d64cd21&title=SN%20-%20Support%20Form&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=7tgydb HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:08 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:08 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c62bfd9447a-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:08 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49895	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:08 UTC	1289	OUT	POST /requests/newUserHC HTTP/1.1 Host: surveynuts.com Connection: keep-alive Content-Length: 36 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://surveynuts.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/v/6d64cd21 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODgwNzE5NywiZXZlbnRJZCI6OSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjl9
2024-03-18 16:20:08 UTC	36	OUT	Data Raw: 75 74 6f 6b 65 6e 3d 31 63 6e 66 6d 70 7a 71 6f 7a 63 26 76 61 72 31 3d 26 76 61 72 32 3d 26 76 61 72 33 3d Data Ascii: utoken=1cnfmpzqozc&var1=&var2=&var3=
2024-03-18 16:20:09 UTC	840	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778808&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=J9%2F4G84ctMEjkt3FW910o0j8nLmH9N6FYh0%2F67iExGI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778808&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=J9%2F4G84ctMEjkt3FW910o0j8nLmH9N6FYh0%2F67iExGI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:20:09 GMT X-Frame-Options: ALLOWALL Content-Type: application/xml Cache-Control: no-cache X-Request-Id: ac9887e3-9c15-481c-8188-5937f2effb15 X-Runtime: 0.113931 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49901	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:09 UTC	1021	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778807071&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fv%2F6d64cd21&frm=0&tiba=SN%20-%20Support%20Form&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqN2TXUry7TwIywTAL-f7MgewzM30aI29LJDSLvNNHP15OBYra&random=3782280675&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49903	54.161.241.46	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:09 UTC	957	OUT	GET /requests/newUserHC HTTP/1.1 Host: surveynuts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODgwNzE5NywiZXZlbnRJZCI6OSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjl9
2024-03-18 16:20:09 UTC	817	IN	HTTP/1.1 404 Not Found Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778809&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=029zi2EBqSL1cTHQOt1o8xsQPO6vCjgDOHrwYZGKU7E%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778809&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=029zi2EBqSL1cTHQOt1o8xsQPO6vCjgDOHrwYZGKU7E%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:20:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 838 X-Request-Id: edac4f6a-6ddd-4a49-98de-8ef07a7c7542 X-Runtime: 0.003084 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:20:09 UTC	369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 61 72 67 61 72 69 6e 65 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 32 46 32 46 32 22 3e 0a 20 20 3c 21 2d 2d 20 54 68 69 73 20 66 69 6c 65 20 6c 69 76 65 73 20 Data Ascii: <!DOCTYPE html><html><head><link href='http://fonts.googleapis.com/css?family=Margarine' rel='stylesheet' type='text/css'> <title>The page you were looking for doesn't exist</title></head><body style="background:#F2F2F2"> ... This file lives
2024-03-18 16:20:09 UTC	469	IN	Data Raw: 6f 70 3a 36 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 72 67 61 72 69 6e 65 27 2c 20 63 75 72 73 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 63 6f 6c 6f 72 3a 67 72 65 79 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 22 3e 0a 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 38 70 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 6f 72 61 6e 67 65 22 3e 4f 68 20 3a 28 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 54 68 65 20 70 Data Ascii: op:60px;padding:10px;margin-left:auto;margin-right:auto;font-family: 'Margarine', cursive;font-size:18pt;font-weight:500;color:grey;text-align:center"><div style="font-size:38pt;font-weight:900;text-align:center;color:orange">Oh :( </div> <div>The p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49905	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:09 UTC	668	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=284rsh HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:10 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:10 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c6b0dba32c7-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49904	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:10 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=7yghdp HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:10 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:10 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668c6cab596a56-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49907	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:18 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=g6z4vh HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:19 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:19 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ca35a5c7c90-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49909	54.237.133.81	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:19 UTC	1293	OUT	GET /en HTTP/1.1 Host: surveynuts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _OpiSmartTestServer_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJThhNWM2MDY5MThmMTAxZjRkNmY1Nzk0ODM0YzFmZDE5BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiMS94RnVHL2Z6NTh4YVk0M0I5M202WGRmWXZXWnVZbXl5cDIyMWV2Qkx5TXc9BjsARg%3D%3D--f4d1ad247a70931e8f784be7874bee419f5049a7; _gcl_au=1.1.1446469022.1710778748; amplitude_id_2cc22001551790b8c84d4975d4028e71surveynuts.com=eyJkZXZpY2VJZCI6IjQzNGM5ZGNjLWE3MGEtNDU0ZC1hNjk2LTE3OWYyMjU1MzNkNVIiLCJ1c2VySWQiOm51bGwsIm9wdE91dCI6ZmFsc2UsInNlc3Npb25JZCI6MTcxMDc3ODc0ODIxOSwibGFzdEV2ZW50VGltZSI6MTcxMDc3ODgwNzE5NywiZXZlbnRJZCI6OSwiaWRlbnRpZnlJZCI6MCwic2VxdWVuY2VOdW1iZXIiOjl9 If-None-Match: W/"e38bc732d626fd336fae0b2f5c55f730"
2024-03-18 16:20:19 UTC	912	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1710778819&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=ZlaFdvrohR5Yx8mr6UpBue8zHvo0uFDbIFL9Ew31Lmc%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1710778819&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&s=ZlaFdvrohR5Yx8mr6UpBue8zHvo0uFDbIFL9Ew31Lmc%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Date: Mon, 18 Mar 2024 16:20:19 GMT X-Frame-Options: ALLOWALL Content-Type: text/html; charset=utf-8 Etag: W/"cb7a9668e23890ab1f0b730b426497c4" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: bb7369e0-b7bf-4f1e-9dbd-1a233683da6f X-Runtime: 0.025296 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 Via: 1.1 vegur
2024-03-18 16:20:19 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 4d 61 6b 65 72 2c 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 51 75 65 73 74 69 6f 6e 6e 61 69 72 65 20 43 72 65 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 67 62 38 6f 2d 59 5f 76 39 44 39 75 5a 58 68 51 2d 5f 61 43 31 58 38 76 35 4e 66 72 4f 41 38 74 4c 63 74 2d 68 77 33 6c 70 45 22 20 2f 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 76 61 72 20 6c 6f 63 61 6c 65 20 3d 20 22 65 6e 22 3b 0a 20 20 6c 6f 63 61 6c 65 20 3d Data Ascii: <!DOCTYPE html><html><head><title>Survey Maker, Free Online Questionnaire Creator</title><meta name="google-site-verification" content="lgb8o-Y_v9D9uZXhQ-_aC1X8v5NfrOA8tLct-hw3lpE" /><script type="text/javascript"> var locale = "en"; locale =
2024-03-18 16:20:19 UTC	3558	IN	Data Raw: 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 31 20 63 68 61 72 61 63 74 65 72 29 22 2c 22 6f 74 68 65 72 22 3a 22 69 73 20 74 68 65 20 77 72 6f 6e 67 20 6c 65 6e 67 74 68 20 28 73 68 6f 75 6c 64 20 62 65 20 25 7b 63 6f 75 6e 74 7d 20 63 68 61 72 61 63 74 65 72 73 29 22 7d 2c 22 6e 6f 74 5f 61 5f 6e 75 6d 62 65 72 22 3a 22 69 73 20 6e 6f 74 20 61 20 6e 75 6d 62 65 72 22 2c 22 6e 6f 74 5f 61 6e 5f 69 6e 74 65 67 65 72 22 3a 22 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 25 7b 63 6f 75 6e 74 7d 22 2c 22 67 72 65 61 74 65 72 5f 74 68 61 6e 5f 6f 72 5f 65 71 75 61 6c 5f 74 6f 22 3a 22 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 Data Ascii: ngth (should be 1 character)","other":"is the wrong length (should be %{count} characters)"},"not_a_number":"is not a number","not_an_integer":"must be an integer","greater_than":"must be greater than %{count}","greater_than_or_equal_to":"must be greater
2024-03-18 16:20:19 UTC	4744	IN	Data Raw: 74 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 73 77 65 72 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 33 22 3a 22 44 65 74 61 69 6c 65 64 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 22 2c 22 66 65 61 74 5f 73 75 62 68 65 61 64 65 72 34 22 3a 22 49 74 20 61 69 6e 27 74 20 6f 76 65 72 20 74 69 6c 6c 20 69 74 27 73 20 6f 76 65 72 22 2c 22 66 65 61 74 31 5f 74 69 74 6c 65 22 3a 22 49 6e 74 65 72 61 63 74 69 76 65 20 73 75 72 76 65 79 20 65 64 69 74 6f 72 22 2c 22 66 65 61 74 31 5f 64 65 73 63 22 3a 22 41 20 73 75 70 65 72 20 69 6e 74 75 69 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 20 73 75 72 76 65 79 73 20 77 68 69 6c 65 20 73 65 65 69 6e 67 20 61 20 70 72 65 76 69 65 77 20 62 Data Ascii: t collecting answers","feat_subheader3":"Detailed reporting and analytics","feat_subheader4":"It ain't over till it's over","feat1_title":"Interactive survey editor","feat1_desc":"A super intuitive interface to create your surveys while seeing a preview b
2024-03-18 16:20:19 UTC	2358	IN	Data Raw: 73 74 61 74 69 73 74 69 63 73 22 2c 22 66 65 61 74 31 36 5f 64 65 73 63 22 3a 22 49 6e 20 72 65 61 6c 2d 74 69 6d 65 2c 20 79 6f 75 20 63 61 6e 20 73 65 65 20 74 68 65 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 65 61 63 68 20 71 75 65 73 74 69 6f 6e 2c 20 77 69 74 68 20 70 65 72 63 65 6e 74 61 67 65 73 2c 20 64 79 6e 61 6d 69 63 20 62 61 72 20 63 68 61 72 74 73 2c 20 61 6e 64 20 6e 75 6d 62 65 72 20 6f 66 20 76 6f 74 65 73 2e 20 52 65 73 75 6c 74 73 20 74 6f 20 6f 70 65 6e 2d 65 6e 64 65 64 20 71 75 65 73 74 69 6f 6e 73 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 20 69 6e 20 61 20 6d 69 6e 69 6d 61 6c 69 73 74 69 63 20 66 6f 72 6d 20 73 6f 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 Data Ascii: statistics","feat16_desc":"In real-time, you can see the evolution of the results to each question, with percentages, dynamic bar charts, and number of votes. Results to open-ended questions are displayed in a minimalistic form so you can have an overview
2024-03-18 16:20:19 UTC	2896	IN	Data Raw: 6f 72 20 65 76 65 6e 20 72 65 2d 6f 70 65 6e 20 69 74 20 6c 61 74 65 72 2e 22 2c 22 66 65 61 74 32 34 5f 74 69 74 6c 65 22 3a 22 49 50 20 66 69 6c 74 65 72 69 6e 67 22 2c 22 66 65 61 74 32 34 5f 64 65 73 63 22 3a 22 44 65 6c 65 74 65 20 61 6c 6c 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 6e 73 77 65 72 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 76 6f 69 64 20 68 61 76 69 6e 67 20 6f 6e 65 20 70 65 72 73 6f 6e 20 76 6f 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 22 2c 22 66 65 61 74 32 35 5f 74 69 74 6c 65 22 3a 22 51 75 69 63 6b 2c 20 65 78 70 65 72 74 20 73 75 70 70 6f 72 74 22 2c 22 66 65 61 74 32 35 5f 64 65 73 63 22 3a 22 57 65 20 72 Data Ascii: or even re-open it later.","feat24_title":"IP filtering","feat24_desc":"Delete all additional answers coming from the same IP address if you want to avoid having one person voting multiple times.","feat25_title":"Quick, expert support","feat25_desc":"We r
2024-03-18 16:20:19 UTC	8302	IN	Data Raw: 64 2c 20 65 78 70 6f 72 74 20 74 68 65 20 64 61 74 61 2c 20 61 6e 64 20 72 65 61 63 68 20 6f 75 74 20 74 6f 20 74 68 6f 73 65 20 77 68 6f 20 65 6e 74 65 72 65 64 20 74 68 65 69 72 20 65 6d 61 69 6c 73 22 2c 22 72 65 61 64 79 22 3a 22 52 65 61 64 79 20 74 6f 20 53 74 61 72 74 20 3f 22 2c 22 73 69 67 6e 75 70 22 3a 22 53 69 67 6e 20 75 70 20 21 22 2c 22 63 75 73 74 6f 6d 65 72 73 5f 6c 6f 67 6f 22 3a 22 4d 6f 72 65 20 74 68 61 6e 20 31 30 30 2e 30 30 30 20 63 75 73 74 6f 6d 65 72 73 20 74 72 75 73 74 20 53 75 72 76 65 79 4e 75 74 73 20 66 6f 72 20 74 68 65 69 72 20 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 73 2c 20 6f 6e 6c 69 6e 65 20 66 6f 72 6d 73 2c 20 61 6e 64 20 72 65 73 65 61 72 63 68 20 70 72 6f 6a 65 63 74 73 3a 22 2c 22 73 6e 6f 77 5f 63 75 73 74 6f Data Ascii: d, export the data, and reach out to those who entered their emails","ready":"Ready to Start ?","signup":"Sign up !","customers_logo":"More than 100.000 customers trust SurveyNuts for their questionnaires, online forms, and research projects:","snow_custo
2024-03-18 16:20:19 UTC	1834	IN	Data Raw: 72 65 20 66 65 61 74 75 72 65 20 69 73 20 61 63 74 69 76 61 74 65 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 68 6f 6f 73 65 20 6f 6e 65 20 6f 72 20 74 68 65 20 6f 74 68 65 72 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 68 65 20 72 65 64 69 72 65 63 74 20 55 52 4c 20 74 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 74 75 72 6e 20 6f 66 66 20 74 68 65 20 73 68 61 72 69 6e 67 20 62 75 74 74 6f 6e 73 20 69 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 2e 22 2c 22 6e 6f 5f 65 6e 64 5f 75 72 6c 22 3a 22 4e 6f 20 65 6e 64 20 75 72 6c 22 2c 22 73 6f 72 72 79 5f 65 6e 64 69 6e 67 22 3a 22 53 6f 72 72 79 2c 20 6f 6e 6c 79 20 75 73 65 72 73 20 6f 6e 20 74 68 65 20 50 72 6f 20 50 6c 61 6e 20 63 61 6e 20 73 65 74 20 75 70 20 63 75 73 74 6f 6d 20 65 6e Data Ascii: re feature is activated, you need to choose one or the other. If you want the redirect URL to work, you need to turn off the sharing buttons in the settings.","no_end_url":"No end url","sorry_ending":"Sorry, only users on the Pro Plan can set up custom en
2024-03-18 16:20:19 UTC	4344	IN	Data Raw: 74 5f 71 75 65 73 74 69 6f 6e 73 22 3a 22 59 6f 75 72 20 70 6c 61 6e 20 68 61 73 20 61 20 6c 69 6d 69 74 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 71 75 65 73 74 69 6f 6e 73 20 61 6c 6c 6f 77 65 64 20 70 65 72 20 73 75 72 76 65 79 2e 22 2c 22 70 72 69 76 61 74 65 5f 77 61 72 6e 69 6e 67 22 3a 22 54 68 65 20 72 65 73 75 6c 74 73 20 74 6f 20 74 68 69 73 20 73 75 72 76 65 79 20 61 72 65 20 6b 65 70 74 20 70 72 69 76 61 74 65 20 62 79 20 74 68 65 20 73 75 72 76 65 79 20 63 72 65 61 74 6f 72 2e 20 49 66 20 79 6f 75 20 63 72 65 61 74 65 64 20 74 68 69 73 20 73 75 72 76 65 79 2c 20 79 6f 75 20 68 61 76 65 20 74 6f 20 6c 6f 67 69 6e 20 77 69 74 68 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 76 69 65 77 20 74 68 65 20 72 65 73 75 6c Data Ascii: t_questions":"Your plan has a limited number of questions allowed per survey.","private_warning":"The results to this survey are kept private by the survey creator. If you created this survey, you have to login with your account in order to view the resul
2024-03-18 16:20:19 UTC	11584	IN	Data Raw: 20 6f 70 74 69 6f 6e 2e 20 49 74 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 50 4c 55 53 20 61 63 63 6f 75 6e 74 73 2e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 6e 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 6e 22 2c 22 62 72 61 6e 64 69 6e 67 5f 6f 66 66 22 3a 22 42 72 61 6e 64 69 6e 67 20 6f 66 66 22 2c 22 74 75 72 6e 5f 6f 66 66 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 66 66 20 62 72 61 6e 64 69 6e 67 22 2c 22 74 75 72 6e 5f 6f 6e 5f 62 72 61 6e 64 69 6e 67 22 3a 22 54 75 72 6e 20 6f 6e 20 62 72 61 6e 64 69 6e 67 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 22 3a 22 53 75 72 76 65 79 20 4c 61 79 6f 75 74 22 2c 22 73 75 72 76 65 79 5f 64 69 73 70 6c 61 79 32 22 3a 22 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 71 Data Ascii: option. It is only available for PLUS accounts.","branding_on":"Branding on","branding_off":"Branding off","turn_off_branding":"Turn off branding","turn_on_branding":"Turn on branding","survey_display":"Survey Layout","survey_display2":"By default, the q
2024-03-18 16:20:19 UTC	2896	IN	Data Raw: 73 74 69 6f 6e 6e 61 69 72 65 73 2c 20 67 61 74 68 65 72 20 61 6e 73 77 65 72 73 2c 20 61 6e 64 20 76 69 65 77 20 72 65 73 75 6c 74 73 20 67 72 61 70 68 69 63 61 6c 6c 79 20 69 6e 20 72 65 61 6c 2d 74 69 6d 65 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: stionnaires, gather answers, and view results graphically in real-time."><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="viewport" content="width=device-width, init

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49906	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:19 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=djy9d1 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:19 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:19 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ca4fc914391-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49910	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:19 UTC	1260	OUT	GET /pagead/viewthroughconversion/1047174163/?random=1710778818773&cv=11&fst=1710778818773&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:20 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:20 UTC	549	IN	Data Raw: 38 66 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8f3(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-18 16:20:20 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-18 16:20:20 UTC	497	IN	Data Raw: 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 37 37 37 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 64 30 76 38 39 35 31 39 35 34 33 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 72 76 65 79 6e 75 74 73 2e 63 6f 6d 25 32 46 65 6e 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 75 72 76 65 79 25 32 30 4d 61 6b 65 72 25 32 43 25 32 30 Data Ascii: 11\x26fst\x3d1710777600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43d0v895195431za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsurveynuts.com%2Fen\x26frm\x3d0\x26tiba\x3dSurvey%20Maker%2C%20
2024-03-18 16:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49913	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:19 UTC	677	OUT	GET /in.php?site_id=100724983&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=93f6og HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:20 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:20 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ca96c197cfc-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:20 UTC	167	IN	Data Raw: 61 31 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 5f 68 65 61 74 6d 61 70 73 5f 67 32 67 5f 31 30 30 37 32 34 39 38 33 3d 27 6e 6f 27 3b 0a 7d 0a 0d 0a Data Ascii: a1if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();_heatmaps_g2g_100724983='no';}
2024-03-18 16:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49912	142.251.40.162	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:19 UTC	1384	OUT	GET /td/rul/1047174163?random=1710778818773&cv=11&fst=1710778818773&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&hn=www.googleadservices.com&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkk3crnuCqQL2HMAMA_UVB058bCAlgbeA45541KxglhG9iFWzBXtU-QtA_r
2024-03-18 16:20:20 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-18 16:20:20 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-18 16:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49911	52.34.230.154	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:20 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1046 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:20 UTC	1046	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 61 63 31 31 31 66 66 32 61 31 65 33 34 39 63 38 31 35 35 32 64 62 34 36 65 61 38 66 32 38 36 34 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 38 31 38 37 33 36 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 30 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 Data Ascii: checksum=ac111ff2a1e349c81552db46ea8f2864&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778818736%2C%22event_id%22%3A10%2C%22session_id%22%3A171
2024-03-18 16:20:20 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869c4-54be59206e971f547bf24700 Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:20 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49914	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:20 UTC	677	OUT	GET /in.php?site_id=101089440&href=%2Fen&title=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=1&x=bgg1xi HTTP/1.1 Host: in.getclicky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:20 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:20 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cab0aa615c3-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:20 UTC	137	IN	Data Raw: 38 33 0d 0a 69 66 28 20 77 69 6e 64 6f 77 2e 5f 63 67 65 6e 20 29 20 7b 0a 69 66 28 20 21 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 29 20 5f 63 67 65 6e 5f 63 75 73 74 6f 6d 2e 63 6f 6f 6b 69 65 73 5f 64 69 73 61 62 6c 65 20 3d 20 31 3b 0a 5f 63 67 65 6e 2e 61 64 76 61 6e 63 65 64 28 29 3b 0a 5f 63 67 65 6e 2e 70 69 6e 67 5f 73 74 61 72 74 28 29 3b 0a 7d 0a 0d 0a Data Ascii: 83if( window._cgen ) {if( !_cgen_custom.cookies_disable ) _cgen_custom.cookies_disable = 1;_cgen.advanced();_cgen.ping_start();}
2024-03-18 16:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49915	142.250.80.100	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:20 UTC	1280	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778818773&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXygxzz7pm9aHkyHhUiUzpG065ob-2Fg99DhsZWtzSNDN0WOG&random=188243884&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49917	142.250.80.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:20 UTC	1046	OUT	GET /pagead/1p-user-list/1047174163/?random=1710778818773&cv=11&fst=1710777600000&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen&frm=0&tiba=Survey%20Maker%2C%20Free%20Online%20Questionnaire%20Creator&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXygxzz7pm9aHkyHhUiUzpG065ob-2Fg99DhsZWtzSNDN0WOG&random=188243884&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-18 16:20:21 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 18 Mar 2024 16:20:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-18 16:20:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49916	52.34.230.154	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:21 UTC	630	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:21 UTC	1043	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 32 35 30 39 32 63 63 62 63 34 64 34 62 30 65 66 39 62 33 62 61 37 31 61 64 35 65 32 32 63 65 62 26 63 6c 69 65 6e 74 3d 32 63 63 32 32 30 30 31 35 35 31 37 39 30 62 38 63 38 34 64 34 39 37 35 64 34 30 32 38 65 37 31 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 34 33 34 63 39 64 63 63 2d 61 37 30 61 2d 34 35 34 64 2d 61 36 39 36 2d 31 37 39 66 32 32 35 35 33 33 64 35 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 30 37 37 38 38 31 38 37 34 34 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 Data Ascii: checksum=25092ccbc4d4b0ef9b3ba71ad5e22ceb&client=2cc22001551790b8c84d4975d4028e71&e=%5B%7B%22device_id%22%3A%22434c9dcc-a70a-454d-a696-179f225533d5R%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1710778818744%2C%22event_id%22%3A11%2C%22session_id%22%3A171
2024-03-18 16:20:21 UTC	334	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869c5-6482201f72b90df971dc5297 Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:21 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49918	44.224.37.210	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:21 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:21 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:20:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869c5-549f4c8042f602941a2a5dbc Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:21 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49919	44.224.37.210	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:21 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:22 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Mon, 18 Mar 2024 16:20:22 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-65f869c6-743bea52770f012061077d28 Strict-Transport-Security: max-age=15768000
2024-03-18 16:20:22 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49920	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:23 UTC	666	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=mxh4e HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:23 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:23 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cbd9af81859-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49922	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:23 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=7xi3b0 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:23 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:23 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cbddf18197c-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49923	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:23 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=9bm5zi HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:23 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:23 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cbdeb148c65-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49921	104.16.224.240	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:23 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=2jku6q HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:23 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:23 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cbf3f5043f3-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49924	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:28 UTC	668	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=e54828 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:29 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:29 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ce1bc23433f-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49927	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:28 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=2gqb39 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:29 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:29 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ce1ffb20f71-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49926	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:28 UTC	668	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=yes&x=9geamg HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:29 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:29 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ce20e1242fe-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49925	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:29 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=9ad9r6 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:29 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:29 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668ce39c0f434a-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49929	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:32 UTC	667	OUT	POST /in.php?site_id=100724983&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&hm=no&x=8gsks3 HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:33 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:33 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cfaca4032ee-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49928	104.16.224.240	443

Timestamp	Bytes transferred	Direction	Data
2024-03-18 16:20:33 UTC	661	OUT	POST /in.php?site_id=101089440&type=ping&res=1280x1024&lang=en-US&tz=Europe%2FZurich&tc=&ck=0&x=3wpklx HTTP/1.1 Host: in.getclicky.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://surveynuts.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://surveynuts.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-18 16:20:33 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 18 Mar 2024 16:20:33 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private expires: Mon, 26 Jul 1997 05:00:00 GMT access-control-allow-origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 86668cfc6d395e65-EWR alt-svc: h3=":443"; ma=86400
2024-03-18 16:20:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	17:19:01
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:19:03
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1972,i,598157843876950773,9708442485952587090,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:19:05
Start date:	18/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://surveynuts.com
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://surveynuts.com/en/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1047174163?random=1710778761366&cv=11&fst=1710778761366&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Flogin&hn=www.googleadservices.com&frm=0&tiba=Login%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://surveynuts.com/en/register	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1047174163?random=1710778766485&cv=11&fst=1710778766485&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://surveynuts.com/en/register	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1047174163?random=1710778790961&cv=11&fst=1710778790961&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43d0v895195431za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsurveynuts.com%2Fen%2Fregister&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20to%20SurveyNuts&npa=0&pscdl=noapi&auid=1446469022.1710778748&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config

Source: https://surveynuts.com/en/login	HTTP Parser: <input type="password" .../> found
Source: https://surveynuts.com/en/register	HTTP Parser: <input type="password" .../> found

Source: https://surveynuts.com/en/login	HTTP Parser: No <meta name="author".. found
Source: https://surveynuts.com/en/register	HTTP Parser: No <meta name="author".. found
Source: https://surveynuts.com/en/register	HTTP Parser: No <meta name="author".. found

Source: https://surveynuts.com/en/login	HTTP Parser: No <meta name="copyright".. found
Source: https://surveynuts.com/en/register	HTTP Parser: No <meta name="copyright".. found
Source: https://surveynuts.com/en/register	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.20
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.20
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://surveynuts.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
http://surveynuts.com